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WIND RIVER REVERSES 
ITS COURSE ON LINUX 

Unveils strategy for developer tools, 
removes BSD/OS from the market 



BY EDWARD J. CORREIA 

If you can't beat 'em, join 'em. 
After spending the past three 
years campaigning against Lin- 
ux and the dangers of its 
GNU General Public 
License, Wind River 
Systems Inc. has given 
in. The company in 
October released a 
version of its vision- 
PROBE II hardware- 
assisted debugging 
tool for VxWorks, the 
first in a series of its 
developer tools that it Wind River's Fraser 
says also will work with attributes the shift 
Linux. Wind River also to market realities. 




announced that it will remove 
its BSD/OS from the market, 
effective immediately; support 
will continue until June 2004. 
Dave Fraser, Wind River's 
group vice president 
of products, attrib- 
uted the reversal to 
market realities. "Lin- 
ux has found an 
incredible foothold 
in embedded," which 
has brought about a 
change in philosophy 
at the company. "We 
had a belief that the 
GPL and IP issues 
► continued on page 26 



Companies 
Go Mobile 
In Reverse 

Microsoft, Vodafone standardizing 
on device-to-desktop Web services 



BY EDWARD J. CORREIA 

Most mobile development news 
is about extending desktop 
applications to mobile devices. 
An alliance announced in mid- 
October between Microsoft 
Corp. and Vodafone Group 
Services Ltd. is intended to do 
the reverse. 

The two companies plan to 
specify a set of Web services 
that will allow desktop applica- 
tions to communicate with 
mobile devices and access the 
services normally limited to 
those devices, including mobile 
messaging, location, SecurelD 
authentication and the micro- 
billing services that track the 
millions of transactions made 
each day by cell phone users. 

Paul Davey, Vodafone's 
strategic relationship executive, 
said that standardizing such ser- 
vices will open up a whole new 
range of pay-as-you-go desktop 



applications that can reach out to 
mobile workers. "The services 
will enable activities such as the 
automated generation and dis- 
patch of text messages from 
computer software to a mobile 
phone. Software on computer 
systems will be able to communi- 
cate directly with users, mainte- 
nance teams or service person- 
nel through mobile telephone 
messaging on an event basis." 

Such capabilities exist today, 
but according to John Maffei, a 
group product manager at 
Microsoft, separate applications 
must be written for each mobile 
network. "Today there is not a 
standard way for developers to 
integrate mobile services into 
their applications," he said. The 
specifications, he added, will 
give mobile operators a consis- 
tent way to expose their ser- 
vices, and for enterprise appli- 
► continued on page 26 



SCO Must Defend Against GPL 

In countersuit, IBM will try to show SCO agreed to terms 



BY YVONNE L. LEE 

Although The SCO Group says 
the GNU General Public 
License is a "shaky foundation 
on which to build a legal case," 
it is the Lindon, Utah, company 
and not the licensing scheme 
that will be on the defensive in 
its lawsuit against IBM Corp., 
according to legal experts. 

The GPL is at the center of 
counterclaims IBM leveled 
against SCO in September. In 
its counterclaims, IBM assert- 
ed, "By distributing Linux 
products under the GPL, SCO 
agreed, among other things, not 



to assert... certain proprietary 
rights over any programs dis- 
tributed by SCO under the 
terms of the GPL." 

At press time, SCO had not 
yet given its formal response to 
IBM's additional counterclaims 
that it violated IBM's copyrights 



under the GPL, but had issued 
a press release stating: "The 
GPL has never faced a full legal 
test, and SCO believes that it 
will not stand up in court." 

SCO spokesperson Blake 

Stowell said, "We believe that 

► continued on page 23 



SIXTH COUNTERCLAIM 

Breach of the GNU General Public License 



From the text of IBM Corp/s countersuit against The SCO Group: 

Mi 109. SCO has taken source code made available by IBM under the GPL, 
included that code in SCO's Linux products, and distributed significant 
portions of those products under the GPL. By so doing, SCO accepted the 
terms of the GPL (pursuant to GPL § 5), both with respect to source 
code made available by IBM under the GPL and with respect to SCO's own 
Linux distributions. 

110. SCO has breached the GPL by, among other things, copying, modify- 
ing, sublicensing or distributing programs licensed under the GPL, including 
IBM contributions, on terms inconsistent with those set out in the GPL; and 
seeking to impose additional restrictions on the recipients of programs li- 
censed under the GPL, including IBM contributions, distributed by SCO. f f 



MSJVM 
USERS GET 
MORE TIME 
TO SWITCH 

Sun, Microsoft agree 
on Java extension 

BY DAVID RUBINSTEIN 

In a rare display of harmonious 
relations, Sun Microsystems Inc. 
and Microsoft Corp. last month 
agreed to extend the license for 
Microsoft to support its outdat- 
ed Java Virtual Machine tech- 
nology from Jan. 2, 2004, until 
the following September. 

According to Jean Elliott, 
the group manager of Sun's Java 
distribution program, the deci- 
sion was made to accommodate 
enterprise customers running 
mission-critical applications on 
the MSJVM who could not 
make the move in time. "Even 
► continued on page 19 
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Serena Broadens Scope From ECM to ALM 

SAFE initiative uses updated TeamTrack as glue for process of change 



BY DAVID RUBINSTEIN 

Companies use the same 
processes to deal with changes 
in applications, regardless of 
the development and change 
management tools they use. 
Serena Software Inc. has stated 
a vision to help organizations 
standardize their processes, and 
later this month will release 
version 6.1 of its TeamTrack 
process engine as the first prod- 
uct under that Serena Applica- 
tion Framework for Enterprises 
(SAFE) vision. 

"It's an evolution from 
where we are," said CEO Mark 
Woodward. "We went from 



silos of change management to 
enterprise change management 
[ECM] across all platforms, and 
now we've become the integra- 
tion glue for all of the different 
tools people use going through 
that life cycle." 

Woodward explained that 
development organizations all 
have processes for how to 
manage projects, how to re- 
quest a change and handle that 
request, and how the code will 
get updated and tested. "The 
processes are all the same 
until you get down to coding 
for a specific platform," he 
said. So Serena has identified 
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TeamTrack serves as the glue to Serena's SAFE platform. 



a set of processes common 
across the application develop- 
ment landscape and has built 
them into the SAFE applica- 
tion life-cycle management 
(ALM) platform. 

TeamTrack sits at the heart 
of the platform, serving as the 
workflow engine and runtime 
for initiating builds, freezing 
code and pushing code through 
the life cycle, according to John 
Keller, product manager for 
TeamTrack. Serena has built 
connectors from TeamTrack 
into the Change Man DS and 
ZMF change management tools 
as well was connectors to third- 
party tools version con- 
trol, issue tracking and 
testing tools. The com- 
pany is creating a busi- 
ness rules authoring tool 
called SAFE Designer, 
which according to 
Woodward will allow 
organizations to define 
their own processes in 
the platform. 

In the next few 
months, Woodward said, 
Serena will be integrat- 
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Complex reports can be customized in the TeamTrack dashboard. 



ing a database with information 
about artifacts, including their 
configuration, so that updating 
assets in the environment can 
be more readily controlled. 

Serena "is branching out, 
and that's a good thing," said 
IDC analyst Dick Heiman of 
the company's shift into the 
emerging application life-cycle 
management space. "Software 
is becoming more complex, 
with more self-service capabili- 



Vendors Rally Behind Basic Profile 

WS-I effort for services interoperability widely embraced 



BY YVONNE L. LEE 

Unlike many other efforts 
at standards and interoperabili- 
ty, the Web Services Interoper- 
ability Organization's Basic 
Profile seems to be accepted by 
large and small vendors of 
various Web services develop- 
ment tools. 

WS-I's Basic Profile is not an 
attempt to set a standard, but 
rather to refine existing stan- 
dards. The idea is to make sure 
everything works together irre- 
spective of the internal code. 

The Basic Profile aims to 
remove ambiguities present in 
various Web services standards 
to ensure the services can com- 
municate with one another 
regardless of the server they are 
on, the language in which they 
are developed or the platform 
underlying them. The members 
of the committee put a wall 
around the various standards, 
reducing areas of miscom- 
munication and incompatibility. 
Where a standard says a service 



"may" do something, the pro- 
file chooses among permitted 
options and insists that it "must" 
do something. 

Basic Profile 1.0 narrows 
the scope of SOAP 1.1, WSDL 
1.1 and UDDI 2.0, although 
UDDI is currently a smaller 
part of the profile. For a ser- 
vice to be compliant, the native 
code must generate SOAP 
messages and WSDL in the 
appropriate format and with 
the expected content, said 
Aaron White, architect at Mind- 
reef Inc., which makes the 
SOAPscope analysis tool. 

"The interoperability issues 
in Web services are not really 
issues for a typical application 
developer," said Dan Foody, 
chief technology officer at 
Actional Corp., which makes a 
Web services management 
platform. "The interoperabili- 
ty issue is really for vendors of 
the platforms that talk Web 
services. It's the people who 
are implementing the guts of 



Web services," he said. 

"[WS-I Basic Profile] cer- 
tainly has implications for tool 
vendors. It certainly has impli- 
cations for application software 
vendors," said Scott Garvey, 
director of Web services mar- 
keting for Microsoft Corp. It 
also has implications for the 
corporate developer who might 
have to consider outside ser- 
vices when creating his own 
applications. 

Garvey said the .NET 
Framework supports the Basic 
Profile because the testing tools 
were built using Visual Studio 
.NET and C#. "Most significant- 
ly, we've already published a pat- 
terns and best practices guide 
up on [msdn.microsoft.com] 
specifically targeted toward 
developers who want to write 
applications that are WS-I BP 
1.0 compliant," he said. 

On the J2EE side of Web 
services, Sun Microsystems Inc. 
in September completed a ver- 
sion of J2EE that is compliant 
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Oct. 15: How WS-I's Basic Profile 
and its tools are trying to make 
multivendor, multiplatform interop- 
erable Web services. 
TODAY: Are vendors 
implementing the Basic Profile? 
Nov. 15: Developers talk about 
their interoperability issues. 

with the Basic Profile. 

When Sun released J2EE 
1.4, it boasted that applications 
developed for J2EE 1.4-com- 
pliant servers would automati- 
cally meet the WS-I Basic 
Profile. When they appear, 
J2EE-compliant application 
servers will produce output 
that will produce SOAP mes- 
sages that adhere to the Basic 
Profile's guidelines. 

Yet Actional's Foody said 
interoperability is not quite as 
simple as using J2EE 1.4. 
"Adhering to J2EE doesn't tell 
you anything about how that 
application interoperates with 
others," he said. 

That's where developers 

have to understand the profile, 

said Mindreef president Frank 

► continued on page 22 



ty, and [they're more] cus- 
tomer-facing, so the health of 
the business depends on the 
health of the software. This 
[SAFE strategy] gets into that. 
It's a move that addresses a 
need that's becoming more 
prevalent in the marketplace." 

Improvements introduced 
in TeamTrack 6.1, which is 
expected to be released around 
Nov. 15, were designed to help 
Serena realize the vision, Keller 
said. Foremost among them is 
the ability to display complex 
reporting in a management 
dashboard. "It's one thing to dis- 
play a tabular report, but with 
the portal, tables can represent 
aggregate views of different 
kinds of requests," Keller said. 

He explained that color 
codes can be used to highlight 
certain thresholds — such as a 
requested change taking too 
long to implement, or if the 
number of tasks assigned to a 
person or team reaches a cer- 
tain level — to speed and control 
the change process. "Managers 
say, 'Don't tell me when it's too 
late. Let me know early, so we 
can make changes to hit the tar- 
get date,' " Keller said. 

Also new to TeamTrack 6.1 
is a browser interface with tabs 
designed to ease a user's navi- 
gation through the data, Keller 
said. Users in one area can get 
the information they need 
without having to sift through 
data relevant to a different 
area, he explained. Other fea- 
tures in the UI include an e- 
mail report icon, folder links 
and sortable columns. 

A typical TeamTrack imple- 
mentation for 25 users is 
approximately US$27,000. I 
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jberRM is an enterprise requirements management system mat neips reams imp 
iiuugri uenftr colfaborafJo* impact analysis, and communication in the definition and manag 
requirements. CaliberRM provides efficient support for distributed organizations and help 
the expectations and scope of projects for initiatives large and small. 
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The Intuitive interface and powerful decision support capabilities 
or CaiiberRM make it easier to deliver on key project milestones 
with greater accuracy and predic Lability. Ca liberRM also helps 
applications meet end-user needs by allowing all project stakeholders 
lo collaborate and communicate throughout the lifecyde. 

* Avoids multiple revisions of unreadable requ irements documents: 
provides quick access to requirements data for team members 

* Provides comprehensive audit trail and change history with 
electronic signature capability 

* Visualizes the impact of requirements changes through a variety 
of user-selected views 

* Prioritizes by business need ... no guessing what's important or 
making assumptions 

* Promotes clarity by standardizing and defining terminology in 

online glossaries 

■ No more iiDDortfexport integrations? CaliberRM integrates live 
into many complementary technologies — including both the 
Borland Suite as well as other best-in-class products 
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InterSystems Expands 
Into Business Integration 

Ensemble abstracts external sources into classes 



BY ALAN ZEICHICK 

Expanding beyond its tradi- 
tional object-relational data- 
base product line, InterSys- 
tems Corp. has jumped into 
the world of business inte- 
gration. The company's new 
BI suite, Ensemble, which 
was released Oct. 26, is 
designed to provide develop- 
ers with an abstracted view 
of external data and applica- 
tion sources, around which 
they can build new compos- 
ite applications. 

According to Paul Grab- The Cache database is the center of InterSys 
scheid, vice president of terns' BI architecture, says Grabscheid. 
strategic planning for Inter- 




Systems, the BI approach of- 
fered by companies such as 
IBM and TIBCO are too 
complex. Those systems, he 
argued, offer a large number of 
facilities, such as a messaging 
engine, database, application 
server, business-process man- 
agement software and a portal, 
but "each of those facilities 
requires its own development 
tools and APIs, storage and 
management procedures," he 
said, which are left for either 
customers to develop or expen- 
sive consultants to implement. 

By contrast, Grabscheid 
said, InterSystems' approach 
uses a simpler architecture 
built around a persistent object 
engine and metadata reposi- 



tory — the company's Cache 
database — and one management 
interface. "We use adapters to 
access external sources, just like 
the other integration solutions," 
he said, "but we go deep into 
them to read the metadata. We 
then create classes that repre- 
sent that metadata — classes 
with properties and methods 
that developers can access." 

Those classes can be viewed 
as Java classes, .NET compo- 
nents or Web services, he said, 
or accessed via SQL queries 
against the Ensemble server. 
"Developers can use either an 
event-driven or service-oriented 
model" to work with the integra- 
tion and to define orchestration, 
Grabscheid added. 



Management, tracing and 
auditing functions use the 
persistent object database, 
which stores all of the 
messages in the product sys- 
tem for future examination; 
Ensemble includes a brows- 
er-based console that can 
be used to trace individual 
transactions, and for ad- 
ministrators to be notified 
when a transaction fails, he 
explained. 

Developers can use 
InterSystems' graphical IDE 
to build applications and 
define orchestration, or they 
can use their own preferred 
programming tools, Grabscheid 
said. Developers have the 
choice of defining integration 
using diagrams, XML files or 
traditional programming tech- 
niques, he added. Workflow is 
defined using the BPEL (Busi- 
ness Process Execution Lan- 
guage) specification. 

Ensemble began shipping 
this week and is priced at 
US$125,000 per server proces- 
sor, according to Grabscheid. 
The server software runs on 
Linux, Unix and Windows. 
Adapters are available for six 
types of external sources: data- 
bases, packaged applications, 
transaction systems, host emula- 
tion, communications protocols 
and vertical-industry protocols. I 
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Ensemble's visual editor allows process flow and integration to be defined through diagrams, coding or XML. 




COMPANIES 



IBM Corp. has acquired Information Laboratory and its Small Worlds 
static analysis tool for Java. The company has ceased sales of Small 
Worlds and closed down its support site, but plans to incorporate its 
functionality into its Rational software suite . . . Hewlett-Packard Co. 
has a new competitive upgrade program, offering US$25,000 worth of 
assessment, porting, equipment usage and migration services for cus- 
tomers moving from Sun Microsystems Inc's Solaris to Linux running 
on HP servers. 



PRODUCTS 



Compuware Corp. has updated its DevPartner Studio suite of Win- 
dows tools. Version 7.1 includes a new memory analyzer and deadlock 
detector for .NET apps, and its static analysis feature tests against 
security rules. The software costs US$1,495 per seat . . . Flashline Inc. 
has released two new add-ins to its Flashline Registry asset manage- 
ment system. The FlashPack for Web Services database adds best 
practices, metadata definitions and a UDDI browser. The Flashpack for 
Federal Enterprise Architecture incorporates four FEA-compliant ref- 
erence models and their model categories, management metrics, 
assets, schemas, metadata and role definitions . . . Version 6.3 of 
TotalView, a Linux/Unix debugger from Etnus LLC, includes new mem- 
ory and heap allocation debugging, as well as the ability to speed up 
debugging by not reading shared libraries during start-up . . . Semble- 
Ware, a division of Objecutive Inc., has added a new 3D spatial 
editor to Visual Welder, its application assembly plug-in for Visual 
Studio .NET. Version 2.0 sells for US$495 per seat . . . Interwoven Inc. 
has updated the SDK for its content management platform. 
A I NTERWOVEN ContentService 2.0 supports 
^P* Web services and improves 

interoperability with .NET applications; developers can now build con- 
tent applications that use the Interwoven server using Visual Studio 
.NET. The company already offered Java and C/C++ APIs . . . IBM Corp. 
has released WebSphere Software Developer Kit for Web Services 
5.1, which adds support for the WS-I Basic Profile 1.0, tools for building 
mobile Java apps, and other tools. WSDK can be downloaded from 
IBM's developerWorks site. The company also has a new plug-in for 
WebSphere Studio that lets developers visually control its DB2 Intel- 
ligent Miner, a data mining application normally controlled via a SQL- 
based API. The plug-in is on the alphaWorks site . . . The version 2.1 
update to SOAPtest can test WSDL files for conformance to the WS-I 
Basic Profile 1.0, according to Parasoft Corp. The company also added 
a new rule customization wizard to its TEST static analysis and unit- 
testing tool for .NET applications . . . SoftBase Systems Inc. has 
shipped Data Generation Facility 4.1, an updated database testing 
tool. Previously, DGF was for mainframe versions of DB2; the new 
release handles VSAM and QSAM databases, as well as DB2 running 
on Unix or Windows . . . Version 5.1 of Universal Data Access Suite, a 
broad set of database middleware tools from OpenLink Software Inc., 
adds support for Unicode and Rendezvous within its multitier ODBC 
Data Access Drivers collection . . . Ensemble Systems Inc. has 
released plug-ins that allow Glider, its J2EE debugger, to plug into 
BEA's WebLogic Workshop, Borland's JBuilder and SlickEdit's Visual 
SlickEdit. The US$499 Glider provides a local EJB container simulator 
and Web container. Previous plug-ins were for several IBM IDEs . . . ITK 
Solutions LLC has released XL2Web, a tool 
for publishing Excel spreadsheets as interac- 
tive models through Web servers. The spreadsheets are converted into 
XML, which is then presented through a Java engine at the server; 
viewing does not require a browser plug-in . . . Helsinki, Finland-based 
company Aivosto Oy has updated its VB Watch debugging suite for 
Visual Basic 6.0. Added to the suite are a runtime profiler; a tool that 
logs exceptions with a screen shot and variable list; and a remote-view 
debugger. The suite costs US$299 . . . McObject LLC has updated 
ExtremeDB, its in-memory embedded database. Version 2.2 adds new 
features for default variables and enumerated types. Plus, the schema 
compiler can now create a C++ API, in addition to its C interface 
. . . Version 3.0 of iRise Application Simulator, from iRise Inc., focus- 
es on improved usability features and has a ► continued on page 26 
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There's a WebMethod to its Acquisition Madness 

Trio of purchases weaves company into standards-based integration, SOA 



BY EDWARD J. CORREIA 

"I would never belong to a club 
that would have me as a mem- 
ber." In the spirit of that Grou- 
cho Marx philosophy, Web Meth- 
ods Inc., which built its business 
on proprietary integration tools, 
says it intends to bring an end to 
proprietary integration. 

The company in October 
announced three acquisitions, 
the jewel of which was The 
Mind Electric Inc. and its Glue 
and GAIA tools, which will form 
the foundation of WebMethods' 
strategy shift toward standards- 
based integration tools and ser- 
vice-oriented architecture pro- 
visioning. The company, based 
in Fairfax, Va., also acquired 
Dante Group Inc., a Colorado- 
based business activity monitor- 
ing software developer, and pur- 
chased portal technology from 
integration solutions developer 
DataChannel Inc., based in 
Seattle. Financial details were 
not disclosed. 

"Before [the acquisitions], 
we were a limited integration 
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company that was restricted to 
that," said Scott Opitz, senior 
vice president of marketing and 
business development at Web- 
Methods. "We are now a Web 
services infrastructure company 
and can approach a much 
broader, more avail- 
able market." Opitz 
said such restrictions 
included an inability 
to add value where 
companies had already 
purchased competi- 
tive solutions. "There 
are only 2,000 Global 
2000 companies. So 
the reality is that they may buy 
a competitor's [integration] 
product and you have nothing 
to sell them. Now we have a 
complementary technology, so 
even if they don't have our inte- 
gration technology, our new 
stuff can sit on top and add 
value to their service-oriented 
architecture." 

Opitz said the move will bring 
about an end to the era of pro- 
prietary integration. "There's still 
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sl lot of companies out there that 
need to do integration of SAP, 
Siebel and PeopleSoft systems 
and custom applications based 
on DCOM or CORBA. The rea- 
son we need the new standards- 
based technology is not because 
the [old] integration 
technology does a 
bad job; it's because 
there's a significant 
software development 
trend going on that 
is moving toward ser- 
vice-oriented archi- 
tectures, and there's 
a need to get them 
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under control." 

Solving this problem, Opitz 
said, will be WebMethods Fab- 
ric, formerly known as GAIA, a 
system that he claimed is capa- 
ble of linking any and all enter- 
prise computing resources into a 
common framework. Typically 
companies deploy not a single 
solution, he continued, but a 
combination of ".NET, J2EE 
and maybe something else. And 
this Fabric technology is able to 



connect all of those things across 
a heterogeneous environment 
and add value like security, 
transactionality and load balanc- 
ing. So whether you've used 
Glue, .NET, Perl or anything 
else, you can combine them with 
extra services under Fabric." 

What spurred this strategy 
shift, Opitz said, was a discon- 
nect between WebMethods, 
which was building tools to help 
remove coding complexity, and 
the developers the solutions 
were meant to help. "While we 
were building our integration 
business, we found that we lost 
touch with the developer com- 
munity — there is still a pretty 
good camp of people that prefer 
to solve problems using coding 
mechanisms and IDE plug-ins." 

Glue, which turns Java 
objects into Web services, 
should help this problem, 
according to Opitz. "Java devel- 
opers say they don't particularly 
like J2EE and EJBs because 
they are so complex. Glue lets 
you bypass the pain of EJBs to 



get to a Web service, but you 
still get to write Java code." 

Graham Glass, founder, 
chairman and chief architect of 
The Mind Electric, will stay on 
as WebMethods' CTO. Prior to 
TME, Glass co-founded a com- 
pany called Object Space, 
which developed Voyager, an 
early distributed computing 
model for Java. 

Dante Group was desirable, 
Opitz said, mainly for Opti- 
mize, which he described as a 
self-learning algorithm that 
analyzes information flowing 
through business systems that 
developers can tie to other infor- 
mation critical to business per- 
formance. "For instance, you 
might track revenue rate-per- 
hour. If it starts trending the 
wrong way, you can look at other 
factors in place at that time." 

The DataChannel acquisition 
involved only its portal software 
and developers. That company 
"built really good portal technol- 
ogy but did badly on company 
execution," Opitz said. I 
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OASIS Sings of Web Services in Harmony 



BY YVONNE L. LEE 

The Organization for the Ad- 
vancement of Structured Infor- 
mation Standards (OASIS) last 
month announced it is working 
to create guidelines for Web 



services implementation, as well 
as a specification for getting 
Web services to work together. 

The Framework for Web Ser- 
vices Implementation (FWSI) 
technical committee plans to 



deliver two specifications — the 
Web Services Implementation 
Process Specification and the 
Web Services Functional Ele- 
ments Specification — accord- 
ing to Roberto Pascual, co- 



chair of the FWSI committee. 
The first will define implemen- 
tation processes for Web ser- 
vices based on existing stan- 
dards. Because Web services 
are distributed, purchasing and 
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implementation steps don't fit 
into common business process- 
es, according to the commit- 
tee's documents. 

The Web Services Function- 
al Elements Specification will 
specify a set of functional ele- 
ments that all Web services sys- 
tems will need. 

SERVICE CHOREOGRAPHY 

On another front, OASIS has 
created the Web Services Com- 
posite Application Framework 
(WS-CAF) group, which is 
working on a specification de- 
signed to address the issue of 
choreographing how Web ser- 
vices work together when they 
are used in concert. 

Multiple Web services used 
together need to produce a 
known result and a desired out- 
put, said Eric Newcomer, chief 
technology officer at Iona Tech- 
nologies Inc. and proposed co- 
chair of the WS-CAF technical 
committee. However, this is not 
always the case. 

He said the proposed speci- 
fication differs from the Web 
Services Interoperability Orga- 
nization's profiles in that 
although both deal with more 
than one Web service, WS-I's 
profiles look only at how a sin- 
gle Web service must behave, 
rather than how more than one 
behave together. Plus, he said, 
the WS-I profiles deal with 
existing standards and don't 
create new ones. 

The WS-CAF group plans 
to deliver three royalty-free 
specifications over the course 
of the next six to 18 months, 
according to Newcomer. The 
first is for context manage- 
ment, or how Web services 
share system information and 
file and device access, New- 
comer said. The second is for a 
coordination framework of 
how a software agent manages 
the task. The third is for how 
transactions are managed. 

Message formats will be 
specified as SOAP headers or 
messages. The new group will 
collaborate with other OASIS 
technical committees, includ- 
ing panels for Business Trans- 
action, Asynchronous Service 
Access Protocol and Web Ser- 
vices Business Process Ex- 
ecution Language. WS-CAF 
developers also plan to work 
with efforts of the World Wide 
Web Consortium, including 
the XML Protocol, Web Ser- 
vices Architecture, Web Ser- 
vices Description and Web 
Services Choreography work- 
ing groups. I 
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Pervasive.SQL Gets Replication, Security 

Enhancements target privacy violations, internal exposure, asset recovery 



BY ALAN ZEICHICK 

Pervasive Software Inc. released 
two add-ins to its Pervasive.SQL 
application-specific database 
software in mid-October, meant 
to improve security and imple- 
ment new access auditing capa- 
bilities. The add-ins, according 
to the company, are designed to 
save developers the time and 
effort of implementing those fea- 
tures themselves. The company 
also has rolled new access con- 
trols and encryption features 
into a new set of security updates 
for Pervasive.SQL itself. 

These are all designed to 
combat three separate security 
issues around databases, said 
Sauud Sait, vice president of 
marketing at Pervasive: exter- 
nal threats, such as database 
attacks and privacy violations; 
internal exposure, such as 
fraud, errors, data theft and 
piracy; and asset recovery in 
the event of a disaster. 

A new, free-of-charge 
security feature pack for Per- 
vasive SQL 8.0 adds a unified 



security model, with features 
designed to control access 
and modifications to the data- 
base application and the data- 
base itself, explained Lance 
Obermeyer, senior product 
manager. "We've giv- 
en the application 
developer a single 
point to manage user 
rights and a single 
function call to han- 
dle logging in, logging 
out, authentication 
and so on," he ex- 
plained. "It's easier 
on the software devel- 
oper, and easier in the 
deployment scenario for security admin, 
itself because it's an says Obermeyer. 
add-in." 

The security pack also adds 
encryption between clients and 
the database server. "We've 
heard from customers that 
security across the network is 
an issue, but it's been hard for 
developers to address that," 
Obermeyer said, "because 
they're not generally plugged 




App developers will 
have a single point 



into that level of the stack." He 
added that the security feature 
pack is added on top of the 
Pervasive.SQL database, and 
does not require changes to 
applications. 

While the security 
feature pack is de- 
signed to help devel- 
opers and managers 
control who accesses 
a database, even auth- 
orized users need to 
be held accountable 
for their actions, said 
Obermeyer, in terms 
of the data that 
they've added, delet- 
ed, looked at or mod- 
ified. "We can know 
that Mary changed 
Bob's salary," he explained, 
adding that the logging shows 
not only which pieces of data 
were changed, but what they 
were changed to and by whom 
they were changed. 

That need is behind the 
release of Audit Master, an add- 
in to Pervasive.SQL that cap- 



tures all system events in a sep- 
arate repository. It includes a 
viewer for querying and analyz- 
ing that repository. The pro- 
gram, said Obermeyer, also can 
send alerts or execute a stored 
procedure when specific prede- 
fined conditions occur, such as 
that change to a salary. 

Pervasive had acquired the 
technology behind AuditM aster 
when it purchased ThinkNet 
Inc. in April 2003. According 
to Sait, the add-in will cost 
US$2,995 per server. 

The second add-in is a data 
replication tool called Data- 
Exchange, and it's available in 
two versions: one optimized to 
perform real-time data backup 
to an off-site standby server, 
and the other for more sophis- 
ticated data synchronization 
and sharing between live 
servers in different business 
locations, said Obermeyer. 

The pricing for DataEx- 
change varies from $1,995 for 
real-time backup to $4,995 
for the synchronization version, 



NEW FOR 
PERVASIVE.SQL 



SECURITY PLUG-IN 
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DATAEXCHANGE 
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according to Sait. 

Coming next year will be a 
full-text searching tool for Per- 
vasive.SQL. 

The company also has 
planned a number of new prod- 
ucts around its pending acquisi- 
tion of Data Junction Corp., 
which was announced in 
August. However, Pervasive 
won't comment on those plans 
until the acquisition is approved 
by the U.S. Securities and Ex- 
change Commission, which Sait 
said is expected by the end of 
the year. I 
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Actional Revamps Web Services Management Suite 



BY ALAN ZEICHICK 

Actional Corp. is updating its 
set of tools for managing Web 
services, including its Looking 
Glass management console and 
SOAPstation proxy server, and 
has added two more prod- 
ucts — an XML firewall and a 
new service-oriented dash- 
board. The new software is 
expected to be available at the 
end of this month. 

Actional, which recently 
sold its middleware adapter 
business to iWay, a subsidiary 
of Information Builders Inc., 
now sells two main product 
lines for managing Web ser- 
vices within the enterprise, 
explained James Phillips, chief 
strategist and senior vice presi- 
dent at the company. 

The original product line is 
SOAPstation, a broker that sits 
between publishers and con- 
sumers of Web services, inter- 
mediating those interactions to 
monitor and control the com- 
munications, including apply- 
ing security and failover. 
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Actional's products operate on three different layers of a Web services network. 



The newer line consists of 
Active Agents and Looking 
Glass. Active Agents are com- 
ponents that aggregate data 
from multiple SOAPstations 
up to Looking Glass, a man- 
agement console that provides 
reports and analysis on appli- 
cation performance and inter- 
dependencies. 

Version 5.0 of the Actional 
suite, according to Phillips, 



includes a number of updates to 
its existing SOAPstation, Active 
Agents and Looking Glass prod- 
ucts, as well as extensions to the 
suite. He singled out three 
changes for specific comment. 

The first is a new product, 
called SOAPstation Edge. It is 
designed to be a Web services 
broker and XML firewall for 
controlling and filtering com- 
munications with organizations 



outside the data cen- 
ter — which might be 
customers or partners, 
or other departments 
within the company, 
Phillips explained. 

The server is de- 
signed to be deployed 
at the edge of the 
network, he said, where 
Actional's customers 
had been deploying an 
XML firewall, and 
behind it a SOAP- 
station server. "Service 
requests would come 
into the organization. 
They'd transit the XML 
firewall, they'd transit SOAP- 
station, and then be forwarded 
to the consumer within the orga- 
nization. That meant two hops 
for the message," he explained, 
each of which required decon- 
structing the SOAP message and 
parsing its XML content. 

The benefit of the new com- 
bined firewall and broker func- 
tionality, he said, "is to perform 
better value compared to serial- 



iWay Buys Actional's Adapter Business 



BY ALAN ZEICHICK 

In a move designed to increase 
its presence in the application 
adapter market, iWay Software 
has acquired several assets and 
product lines from Actional 
Corp. The all-cash deal, which 
closed in mid-October for an 
undisclosed sum, will allow 
Actional to focus on its newer 
Web services management 
products. 

iWay is a subsidiary of Infor- 
mation Builders Inc. 

The products acquired are 
Actional's SOAPswitch, Control 
Broker, Object Bridge and their 



related adapters, patents and 
existing license agreements. 
iWay also is hiring 22 members 
of Actional's staff in Montreal 
and Walldorf, Germany, to sup- 
port its Microsoft and SAP rela- 
tionships, respectively. iWay 
will maintain Actional's pricing 
through the end of this year. 

Actional will retain its 
SOAPstation Web services bro- 
ker, Looking Glass manage- 
ment platform, Active Agent 
proxies and the Systinet Wasp 
UDDI server. 

"Our objective is to become 
the dominant player in the 



adapter marketplace," said 
John Senor, president of iWay. 
"We offer a wide breadth of 
adapters — over 250 adapters 
that are integrated into a single 
fully integrated architecture, 
and which are deployable in 
the traditional sense or via 
Web services." 

Senor continued, "What 
Actional brought to the table 
was technology that was partic- 
ularly well suited for high-end 
transaction processing, both on 
the mainframe with CICS and 
IMS, but also in the CORBA 
environment." 



He also cited Actional's 
adapters for Microsoft's BizTalk 
Server as key assets. "The 
BizTalk Server-oriented capa- 
bilities suit Microsoft's .NET 
and BizTalk strategies more 
effectively than a general-pur- 
pose architecture, which is 
something that iWay offers for 
other markets." This new iWay 
emphasis on .NET won't conflict 
with the company's commitment 
to J2EE, Senor insisted. 

According to Frank Bergan- 
di, president and CEO of 
Actional, "Clearly our focus now 
is Web services management." I 



BEA TAKES SECURITY ONTO ITSELF 



BY YVONNE L. LEE 

BEA Systems Inc. last month 
began shipping a system 
designed to remove security 
responsibilities from developers. 

The new system, BEA 
Weblogic Enterprise Security, 
takes security from the individ- 
ual applications and makes it 
accessible to resources around 
the network, including Web 
servers, application servers and 
data stores. 

A result of BE As February 
acquisition of CrossLogix Inc., 



Enterprise Security is the third 
of the company's moves to 
expand security, according to 
vice president of business 
strategy Mark Moriconi. The 
first was making security avail- 
able to its own application 
server in WebLogic 7.0. Next, 
the company made security 
available throughout its own 
WebLogic Platform 8.1. Now, 
it is making the security avail- 
able to other products via APIs 
and partnerships. 

This is the first time BEA has 



pulled out security services as a 
separate product. Enterprise 
Security will work not only with 
the WebLogic Platform, but also 
with applications developed with 
other platforms, such as IBM's 
WebSphere, Moriconi said. 

The software provides cen- 
tralized security administration 
and configuration, but distrib- 
utes that information to modules 
customized for Web servers, 
application servers and custom 
applications. 

It includes authentication 



using LDAP, relational databases 
and Microsoft's NT domain sys- 
tem. It uses Security Assertion 
Markup Language (SAML) to 
exchange security information, 
and can assign business roles that 
map to specific access rights. 

According to Moriconi, the 
system can unify disparate secu- 
rity systems into a single policy. 
"You can change your policy and 
we implement it automatically 
across the enterprise in sec- 
onds," he said. 

Enterprise Security was 
scheduled to ship Oct. 28, 
with a price of US$10,000 per 
processor. I 



ly deploying a broker behind a 
firewall." While there are mon- 
etary benefits to acquiring and 
administering a single server, 
Phillips argued that the biggest 
value is in higher performance: 
"The real overhead of XML is 
around parsing those complex 
text documents; that dominates 
the transaction cost. With 
SOAPstation Edge, you've only 
got one time that you have to 
parse the XML to enforce secu- 
rity and routing policies, and 
that makes a dramatic improve- 
ment in performance." 

The second new feature is 
Service Stabilizer, which Phillips 
describes as a new set of func- 
tions within Actional's entire 
product suite. "Service Stabi- 
lizer lets customers build adap- 
tive environments, whereby 
Web services can self-heal," he 
said, "so, when changes occur 
in the application environ- 
ment, this technology allows a 
set of predefined functions to 
occur that are designed to mit- 
igate any performance, avail- 
ability or security problems 
that may exist." 

Finally, there's a new tool 
for viewing Web services trans- 
actions called MyServices Por- 
tal. "This is a browser-based, 
user-customizable monitor that 
allows different people in the 
organization, who would have a 
vested interest in the Web ser- 
vices, to tailor their view." 

For an example of how the 
portal would work, Phillips 
cited Amazon. corn's affiliate- 
facing Web services that handle 
back-end fulfillment. "There 
may be a person at Amazon 
who is responsible for affiliate 
relations; he may want to con- 
figure the portal to show the 
top 10 affiliates of those Web 
services by volume. Another 
individual might be responsible 
for the back-end SAP system; 
he may want to focus just on 
those Web services provisioned 
by that system. Someone else 
might want to look only at 
those service-level agreements 
that they've guaranteed in 
regard to internally used Web 
services." 

Phillips indicated that there 
are more than 100 customers 
currently using Actional's soft- 
ware, and about a dozen using 
the company's Web services 
management suite. 

Pricing for the new suite 
components was not available. I 
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Compuware Gets a Visual on Web App Testing 

New navigation module among key updates in OACenter Performance Edition 



BY DAVID RUBINSTEIN 

Compuware Corp. has updat- 
ed QACenter Performance 
Edition, its server perfor- 
mance testing and monitoring 
suite, to add visual navigation 
of Web pages and images and 
agentless monitoring of Web 
applications. 

Regarding version 5.0 of the 
suite, released on Oct. 15, 
Richard Pugh, QACenter 
"champion" at Compuware, 
said, "We've had load and stress 
testing for response times, 
which evolved into a need to 
know what went on during the 
test, instead of simply getting a 
thumbs-up or a thumbs-down 
on the test." Testing, he said, 
is now about "being able to 
look at system resources on 
servers... anything physical go- 
ing on inside the servers during 
a load test." 

The QACenter Performance 
Edition suite consists of several 
separate programs, including 
the QALoad load tester and 
QARun automated test-script 
execution tool. 




QALoad lets users visually navigate through Web apps, automatically updating scripts. 



The new capability, he 
explained, allows testers to visu- 
ally edit and update scripts 
from a model based on the 
most current application per- 
formance information. "There's 
lots embedded in SOAP and 
XML requests," Pugh said. 
"This provides a tree view as 



well as a pop-up panel that 
shows the Web page you were 
at during the test" when an 
issue arose. 

Agentless monitoring, Pugh 
said, removes the question of 
whether or not the agents 
themselves impact on the test 
results. This is achieved by 



using the resource 
monitoring capabili- 
ties embedded within 
operating systems, he 
added. This also cuts 
the time it takes to 
gather the results, as 
the step of installing 
agents throughout the 
system has been re- 
moved, he claimed. 

The reporting capa- 
bilities in the tool have 
been updated "to give 
more of a Windows 
drag-and-drop capabil- 
ity to customize re- 
ports," he said. Anoth- 
er improvement, said 
Pugh, is in dynamic 
test execution. In the 
new version, test para- 
meters can be changed during 
the test. 

"You can dynamically alter 
things going on in the test, such 
as insert pauses on-the-fly to 
better simulate a real user 
experience," Pugh explained. 
He added that if a tester sees 
performance degradation dur- 



ing the test, the parameters can 
be eased back without having to 
take the test down. Similarly, 
the load volume can be ramped 
up for more intensive stress 
testing during the load test. The 
results of the tests can be 
attained via a Web browser, 
simplifying access. 

QACenter Performance Edi- 
tion 5.0, which sells for a fixed 
price of US$35,000 per server, 
now works with Compuware s 
Vantage .NET testing tools to 
allow users to identify network 
performance issues before the 
load and stress testing begin, 
Pugh said. The pricing has 
been changed to allow virtual 
users to be shared across multi- 
ple applications and depart- 
ments by a check-in/check-out 
system, with unused virtual 
users remaining in a "pool" to 
be used elsewhere in an organi- 
zation, Pugh explained. Before, 
users had to pay every time 
they checked out a virtual user, 
as those users were specific to 
the applications being tested, 
Pugh explained. I 
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SPT Pushes Boundaries of Automated Software Testing 

Claims new model-based solution generates test cases, scripts automatically 



BY DAVID RUBINSTEIN 

When people think of automat- 
ed software testing, Peter Beck- 
er explained, they're thinking 
only of automated execution. 
Becker, founder of a company 
called Software Prototype 
Technologies (SPT), advocates 
automation throughout the 
testing cycle. 

With the release last month 
of Direct to Test, Becker claimed 
that SPT is moving the science of 
QA forward into an area of mod- 
el-based testing. "Software test- 
ing still has an ad hoc, manual 
approach," he said. "Our view is 
that QA has to come out of the 
dark ages. Twenty years ago was 
the last time there was a major 
change in QA. We're looking to 
simplify the QA task." 

The solution, which inte- 
grates technologies from two 
other small companies, auto- 
mates design of test cases, inte- 
gration with the interface and 
generation of test scripts. 
"When the QA person gets the 
test model, all the work of fig- 
uring which test cases to run 



and writing the scripts is all tak- 
en away," Becker claimed. 

Direct to Test combines 
SPT's Rapid Requirements/ 
Rapid Test modeling tool with 
the Calabor RBT algorithm- 
based test-case design engine of 
Bender and Associates and 
ScriptTech's TMX test author- 
ing tool, which automatically 
generates WinRunner or Segue 
SilkTest scripts, Becker said. An 



added benefit is that because 
the scripts are generated, the 
number of licenses of those 
tools an organization needs can 
be reduced. "You only need a 
couple of people on the team 
with that capability," Becker 
said of the potential savings. 

Becker said that current test 
organizations must maintain 
test specifications and script 
libraries, but that with Direct to 



Test, only the model needs to be 
saved, and when new scripts are 
needed, users can simply recre- 
ate them from the models. If a 
test requirement changes, 
Becker said, "you can tell TMX 
the new object name and it 
regenerates the low-level code. 
You tell the model about the UI, 
then generate the test scripts. 
As a tester, you're never worried 
about writing test cases or 



scripts." He further explained 
that, currently, testers who 
require specialized error report- 
ing must write that code into 
each test script; with Direct to 
Test, users write it once into 
TMX, which then distributes 
that requirement into every test 
case generated. 

Direct to Test costs around 
US$8,000 per seat, depending 
on project scope. I 



WILY IMPROVES JVM, NETWORK VIEWS WITH INTROSCOPE 4.2 



BY YVONNE L. LEE 

Wily Technology Inc. in Octo- 
ber released a new version of 
its Introscope Web services 
monitoring tool with closer 
views of both the Java Virtual 
Machine and the actual net- 
work connections. 

Previous versions of Intro- 
scope offered application serv- 
er-level views and custom 
views of the network. Intro- 
scope 4.2 now also displays 
JVM-level instrumentation, 
making it possible to discover 



and monitor the components 
in the JVM, including connec- 
tors to back-end transaction 
servers, security servers and 
databases. The software also 
shows activity related to server 
sockets. 

Introscope 4.2 displays de- 
tailed information about the 
specific internal and external 
systems that are consuming 
socket bandwidth, indicating 
which clients are connected to 
the server. It reports the num- 
ber of socket openings, clo- 



sures, acceptances and concur- 
rent readers and writers. 

The software's AutoProbe 
feature now will work with 
Oracle lOg. AutoProbe is 
Wily's feature for discovering 
and monitoring applications 
built with various servers. Wily 
has close development part- 
nerships with BE A, Hewlett- 
Packard, IBM, Oracle and 
Sun, which have all integrated 
Wily's AutoProbe interface, so 
that applications built on these 
platforms can be monitored 



automatically for performance 
issues in the Wily software 
without any changes to the 
application code. 

Additional features of In- 
troscope 4.2 include scalability 
enhancements to the Intro- 
scope Enterprise Manager, 
the central repository for 
application metrics, and us- 
ability improvements to the 
interface. 

Introscope 4.2 is available 
now with a price of US$7,500 
per processor. I 
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TeaLeaf Makes an Issue 
Of Web App Performance 



BY DAVID RUBINSTEIN 

Claiming it is increasingly important to 
go beyond such metrics as uptime, 
availability and page speed, TeaLeaf 
Technology Inc. last month released 
four new add-ons to its newly renamed 
RealiTea Web application management 
software that looks at every click from 
a user's perspective to resolve prob- 
lems in real time. 

An additional benefit of the soft- 
ware, according to marketing director 
Tim Smith, is its ability to audit trans- 
actions, preventing customers' claims 
that the application processed some- 
thing in error or that they meant to 
cancel a purchase that went through 
anyway. 

"We capture what end users do with 
the Web application," Smith said. 
"Every click and request can be saved, 
indexed and ultimately replayed." Often, 
Smith said, applications fail simply 
because the user typed something in 
error; yet even something as simple as 
an input error triggers a QA response. 
With RealiTea, Smith said, "here's a 
problem. You can read it in this software 
to determine the error. If the Web serv- 
er failed, you don't need to get a devel- 
oper involved. Or if it was a user error, 
that doesn't have to tie up any 
resources" to resolve the issue, he said. 

The RealiTea software, which origi- 
nally was created by SAP as a debug- 
ging tool and later was spun out and 
sold as IntegriTea, includes four com- 
ponents, Smith said — Capture, Server, 
Portal and Viewer. Capture, a kind of 
black-box recorder of all moves within 
a Web application, records what users 
are doing and seeing to detect applica- 
tion or business process failures. The 



company uses a passive capture appli- 
ance that sits on the network's edge 
and, through a spanning port or a net- 
work tap, captures every request and 
response, as well as end-to-end page- 
load speed. The Server processes 
the captured data and gives a visual 
display of what transpired through 
each page of the Web session, and also 
generates alerts based on preset 
thresholds. The Portal provides a Web- 
based view into what was captured; the 
Viewer can then be launched to drill 
down into individual sessions, and 
opens an executable file that is a com- 
plete rendering of what the user did, 
which can be replayed. 

Smith said the TeaLeaf additions are 
a module that allows the captured data 
to be moved into analytics tools; a dash- 
board that provides a high-level view of 
the success or failure rate of critical 
applications; a scripting module that 
takes the user's Web session and creates 
scripts for use in such tools as Mercury 
Interactive s Load Runner or Microsoft 
Web Application Services; and a support 
module for converting the user sessions 
into incident tickets — the module is 
integrated with other incident tracking 
and e-mail alert tools. 

"The challenge to development orga- 
nizations is seeing exactly what the user 
saw when [the application] failed," 
Smith said. "A customer can surface an 
issue, but the developer doesn't know 
the context of the issue." 

RealiTea is priced at US$10,000 per 
server processor for Intel-based servers 
and $20,000 for non-Intel servers, and 
requires the separate purchase of the 
Portal component, which sells for $5,000 
per seat. I 




RealiTea Viewer provides the ability to replay entire Web sessions. 
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FirstSQL/J 2.6 Gets Closer to J2EE 



Object-relational databases support JCA, JTA, automated builds 



BY EDWARD J. CORREIA 

"We don't do things our own 
weird, proprietary way; we do 
things the standard way," said 
David Morse, vice president of 



marketing at FirstSQL Inc. The 
Java developer in mid-October 
released new versions of its 
FirstSQL/J Enterprise Server 
and FirstSQL/J Professional 



object-relational databases, 
with claims of better adherence 
to J2EE specifications, includ- 
ing support for the Java Con- 
nector Architecture, connec- 



tion pooling and the Java Trans- 
action APIs. 

Both now at version 2.6, 
FirstSQL/J databases provide 
Java-object persistence through 
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internal native O/R mapping of 
Java classes and methods with 
SQL92 intermediate level 
manipulation. 

Morse said that supporting 
Java Connector Architecture 
(JCA) benefits developers by 
simplifying connections be- 
tween JCA-compliant applica- 
tion servers and existing enter- 
prise information systems. 
"JCA allows developers to do 
less programming because it 
creates standardized compo- 
nents like EJBs, which can be 
reused whenever they add 
connectivity to a new enter- 
prise system." 

Consistent implementation 
using the Java Transaction APIs 
(JTA) also simplifies con- 
nections made for distributed 
transactions. "Again, if they 
have different CRMs or other 
types of enterprise systems, 
transactions that need to be dis- 
tributed to those systems can 
be developed just once. JTA 
brings it all together and lets 
you distribute your transactions 
in the same way for differing 
systems with no custom code." 

BUILD, ARBITER APIs 

Also new in version 2.6 are 
Build and Arbiter APIs. Morse 
said the Build API permits data- 
bases to be created from within 
program code, automating a 
process that he said previously 
required a database developer. 
"For example, you can start up a 
JBoss application and have all 
the tables and fields created for 
you. People can just type a few 
field and table names, and 
everything else happens auto- 
matically. Having the Build API 
allows that to happen from 
within your applications." 

The Arbiter API, he said, 
lets developers build more 
intelligence into their failover 
routines, giving developers the 
option of automatically switch- 
ing to a series of daisy-chained 
standby servers, if necessary. 
"Now you can have more than 
one standby server if you want 
to, and require no human inter- 
vention when a failure happens 
at 3 o'clock in the morning." 

FirstS QL/J Professional, in- 
tended for single-user appli- 
cation-specific database devel- 
opment, costs US$695 per 
developer plus $10 to $25 for 
runtimes. FirstSQL/J Enter- 
prise Server includes unlimited 
server connections and configu- 
ration files for JBoss, and costs 
$1,195 per developer seat plus 
$20 to $50 per runtime. Both 
are available now. I 
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< continued from page 1 

if [their] engineering issues are 
simple, often there is a formal 
qualification and test process 
which takes time," she said. 

Elliott explained that cus- 
tomers have approached Mi- 
crosoft about getting more 
time, and then Microsoft 
approached Sun. The problem 
stems from Microsoft's 2001 
settlement of a lawsuit brought 
by Sun that, among other 
things, allowed Sun to termi- 
nate Microsoft's license of out- 
dated Java technology. Sun has 
said repeatedly that it would be 
willing to license to Microsoft 
the most recent Java runtime; 
Microsoft has not been willing 
to do so and has been offering 
alternatives to Java, including a 
migration kit from Java to its 
.NET platform. 

"This is one more thing we're 
doing to help move the industry 
onto the most current Java 
technology," Elliott said. These 
efforts include distribution 
agreements with OEMs such as 
Dell, HP and Toshiba to have 
Sun's JVM installed on desktop 
machines; the creation of a 
Java.com consumer-oriented 
Web site designed for ordinary 
computer users to download the 
most current Java Runtime 
Environment; and the Java "Get 
It Now" program, which Elliot 
likened to RealNetworks' "Get 
RealPlayer" link that will be put 
up next to Web content so con- 
sumers can easily get the down- 
load. Consumers wouldn't know 
if their machine had the latest 
Java technology built in until the 
first time they tried to run a Java 
application and got an error 
message, he said. 

Elliott called the efforts part 
of Sun's "renewed focus on 
reinvigorating the [Java] brand. 
It makes it more accessible to 
consumers." 

Microsoft product manager 
Tony Goodhew explained that 
customers can use the additional 
time to find where their applica- 
tions rely on MSJVM and to con- 
sider alternatives. Microsoft's 
alternatives involve switching 
over to .NET with the Java Lan- 
guage Conversion Assistant; 
using other rendering technolo- 
gies such as ASP.NET, DHTML 
or Macromedia Flash; or acquir- 
ing the most recent Java runtime 
from third-party vendors such 
as BEA, Borland, IBM and 
Oracle. On its www. microsoft 
.com/mscorp/java Web site, the 
company provides migration 



paths to businesses, resellers of 
Microsoft products that rely on 
MSJVM, IT professionals and 
developers. 

"It's basically the applets," 
Goodhew said of the problem 
caused by the shutting down of 
the Microsoft JVM. "But over 
the last six years, applet usage is 
trending down. It's the menu 



bar on the left-hand side of a 
Web page, for example. In the 
enterprise space, these things 
really aren't that important. It's 
just that they have these things 
on a page they'd prefer didn't 
break if they turn off the virtual 
machine." 

Goodhew added, "We per- 
sonally believe the best option is 



to move to the .NET Frame- 
work. But there are other 
options and hidden costs behind 
each of them." He explained 
that the cheapest option is to 
use a lockdown approach, which 
allows users to accept applets 
via Internet Explorer and the 
MSJVM only from trusted enti- 
ties, even after Microsoft stops 



supporting the virtual machine. 
Microsoft also plans to move 
to a more dynamic user experi- 
ence for ASP.NET Web applica- 
tions, following the path cut by 
Macromedia, Curl and others. 
Those plans were expected to be 
unveiled at the Microsoft Pro- 
fessional Developers Confer- 
ence in late October. I 
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Software Product Line Strategy: 
Boost Productivity Through Reuse 



BY JOHN D. MCGREGOR 
AND LINDA M. NORTHROP 

The software product line 
approach to the development of 
software-intensive products is a 
comprehensive managerial and 
technical strategy for achieving 
strategic business goals. Compa- 
nies such as Hewlett- 
Packard, Nokia and 
Robert Bosch have 
reported significant increases in 
productivity and quality while 
achieving significant decreases 
in time-to-market as a result of 
using this strategy. Hewlett- 
Packard Co., for example, expe- 
rienced a 25-fold decrease in 
defects and a fourfold decrease 
in head count per project as a 
result of using the product line 
strategy. 

A software product line is a 
set of software-intensive systems 
sharing a common, managed set 
of features that satisfy specific 
needs of a particular market or 
mission, and that are developed 
from a common set of core 
assets in a prescribed way. A 
software architecture is devel- 
oped that spans the needs of the 
entire product set. 

The product line architec- 
ture provides a context in which 
assets, such as code and tests, 
can be developed with just 
enough flexibility to satisfy the 
products in the product line. 
This represents a significant 



ANALYSIS 



departure from software reuse 
schemes in which attempts are 
made to make assets as general 
as possible without the context 
provided by an architecture. 

Essentially the product-line 
strategy is an umbrella that 
encompasses practices for carry- 
ing out the enterprise, 
technical management 
and software engineer- 
ing activities in a development 
organization. The strategy is ini- 
tiated at the highest levels of the 
organization with the setting of 
business goals that are related to 
the development of software- 
intensive products. 

An early practice is the iden- 
tification of a set of products 
that share characteristics, such 
as similar functionality or simi- 
lar technical domains. Tactics 
are devised at the managerial 
levels to establish an inventory 
of assets that will support the 
efficient production of the 
identified set of products. The 
engineers implement these tac- 
tics by acquiring or developing 
the assets needed and assem- 
bling them into products. 

A key idea in the strategy is 
to carefully analyze the selected 
set of products to identify not 
only the common characteris- 
tics but also the variabilities 
among the products. The U.S. 
National Reconnaissance Office 
exploited commonality to build 



a product line for its ground- 
based spacecraft command and 
control software. 

The development organiza- 
tion is structured to exploit the 
commonalities and variabilities 
among the products by recogniz- 
ing the separate roles of asset 
builders and product builders. 
The common goal of these two 
roles is to plan, design and 
implement assets in such a way 
that strategically significant lev- 
els of software reuse can be 
attained. Salion Inc. reports that 
each new product in its product 
line has a reuse content of 
approximately 95 percent. 

WHAT TO COVER, NOT HOW 

The software product line strat- 
egy is prescriptive in the prac- 
tices and activities to cover, but 
not in the way the coverage is 
achieved. It embraces a wide 
range of techniques and tech- 
nologies so long as they adhere 
to the basic principles. 

For example, Object Man- 
agement Group Inc.'s Model 
Driven Architecture techniques 
provide one viable approach to 
developing the software archi- 
tecture and code-related assets 
for the product line. Salion 
uses agile development to 
structure its product develop- 
ment process. Aspect-oriented 
design has been used by 
Hewlett-Packard to implement 



the range of variants for assets. 

There are obviously risks 
associated with, and constraints 
on, the use of the software prod- 
uct line strategy. Of course, any 
change to an organization's 
structure and processes is a risk. 

Adopting the software prod- 
uct line approach can require 
changes to engineering and 
managerial practices and can 
require different structures to 
maximize the benefits. Being a 
comprehensive strategy, the 
changes required to adopt the 
product line approach can place 
a strain on an immature devel- 
opment group. Process disci- 
pline, careful planning and an 
incremental implementation of 
the strategy mitigate this risk, 
and the amount of variation 
among products constrains the 
economies of scale that can be 
realized. For example, an asset 
that can be used only in a couple 
of products will be more expen- 
sive than an asset that can be 
used in eight or 10 products. 

Experience shows that these 
risks are offset by some very 
attractive benefits. Cummins 
Inc., a manufacturer of large 
diesel engines, reduced the 
effort needed to produce the 
software for a new engine from 
250 person-months to a few 
person-months. Typically, 75 
percent of a new product 
comes from the existing inven- 



tory of assets. Nokia has pro- 
gressed from producing five 
wireless products per year to 
approximately 50 with very lit- 
tle increase in staff. 

The product line strategy 
provides the organization with 
the opportunity to spend the sav- 
ings gained in a variety of ways. 
Increases in productivity can be 
translated into the opportunity 
to reduce recruitment of new 
employees or to apply employ- 
ees to products that address new 
markets. The reduced time-to- 
market can be used to create a 
competitive advantage over 
companies that cannot respond 
as quickly to changes in market 
direction. 

The Product Line Systems 
Program at the Carnegie Mel- 
lon Software Engineering Insti- 
tute has championed these 
ideas and pioneered many of 
the practices that characterize 
the software product ine ap- 
proach to software develop- 
ment. Technical publications by 
SEI staff, an extensive bibliog- 
raphy and pointers to many 
resources can be found at 
www.sei.cmu.edu/plp. 

Also, the Software Product 
Line Conference has been spon- 
sored twice by the SEI, and its 
proceedings, referenced on the 
Web site, provide reports from a 
range of companies. I 

John D. McGregor is a visiting 
scientist at Carnegie Mellon Uni- 
versity's Software Engineering 
Institute. Linda M. Northrop is 
the head of the Product Line Sys- 
tems Program at the SEI. 



Meet the Database Developer's Boss 




When he looks at the hard drive in his new laptop, 
he just laughs. Forget about 20 gigabytes - his 
data centers contain more than 200 terabytes of in- 
formation in DB2, Oracle, SQL Server and Sybase. 
And that's just in his supported database applica- 
tions. There's unfortunately no way of telling how 

many other clusters of enterprise infor- 
mation are scattered around the 
organization. 

He has the best job in the IT de- 
partment: Managing database 
development is never dull. 
Sure, it's tedious working out 
the report schedules and 
ensuring that backups 
and disaster plans are 
thoroughly tested. But 



his colleagues who are building Web services 
and planning service-oriented architectures are 
keeping him busy documenting schemas, extending 
host-access services and updating his core database 
software to support XML and Web services. In fact, 
he's never seen so much change in his entire career 
- and he loves every minute of it. 

What does he read? He's long past his days of 
writing SQL gueries or building tables. After all, 
his job is to guide his company's progress by 
ensuring that his databases and database develop- 
ers are in sync with business priorities. These days, 
that means looking outside the database world into 
the entire spectrum of application development. 
He needs to know the trends, the products, the 
alliances, the NEWS and what it all means. 
That's why he reads SD Times. 



rum m:rKm 



The industry newspaper for 
software development managers 
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lona Links Middleware 
To Services Integration 

New Artix tools offered as entry point into SOAs 



BY DAVID RUBINSTEIN 

Leveraging its experience in middle- 
ware, lona Technologies Inc. last 
month released two of four products in 
its new Artix family that are designed, 
it says, to help businesses take advan- 
tage of Web services now while laying 
the foundation for the creation of ser- 
vice-oriented architectures at some 
future point. 

The two products — Artix Relay and 
Artix Encompass — are "service-orient- 
ed integration products," according to 
lona CTO Eric Newcomer. "What we 
mean is that businesses can realize the 
integration benefits from SOAs based 
on Web services. Artix gives the sup- 
porting infrastructure to use Web ser- 
vices in mission-critical applications." 

The Artix products, Newcomer said, 
will help businesses reuse existing 
applications by creating Web services 
interfaces to those applications and 
middleware. Also, he said, the products 
abstract away the differences across 
middleware platforms, offering busi- 
nesses the opportunity to reduce the 
number of platforms and products they 
now license and allowing users to break 
dependencies and create composite 
applications and workflows. 

"We don't want to force companies 
into a comprehensive effort to take 
advantage of these technologies," 
Newcomer said. "That rip-and-replace 
approach, and a lack of standards for 
Web services interoperability, have 
made Web services a nonstarter." 

Artix Designer, an editor and code 
generator shared by Relay and Encom- 
pass, is used for creating links, or "con- 
tracts," between middleware systems to 
solve tactical interoperability problems, 
Newcomer said. These contracts can be 
changed via a graphical interface with- 
out the user having to touch the service's 



WSDL code, he claimed. The tool also 
creates the necessary C++ proxies and 
stubs for the contracts. 

After the contracts are created and 
stored on a file system or in an LDAP 
directory service, Newcomer explained 
for example, the Relay and Encompass 
runtimes use them to connect the ser- 
vices an application requires. 

Artix Relay and Encompass ship with 
protocols for CORBA, IBM's MQSeries, 
TIB CO and Tuxedo platforms; Artix 
Mainframe, due to ship later this year 
with Artix Migrate, can be used to 
expose CICS and IMS transactions as 
Web services without changes to the 
mainframe apps. Artix Migrate is the 
consolidation piece that creates a level 
of abstraction so applications dependent 
upon a certain piece of middleware can 
be moved and reused. 

Newcomer called the release "an 
incremental set of products to build up 
to SOAs. This lets you break the 
dependencies" on specific middleware 
platforms and create an architecture 
that allows for asset use. 

Newcomer emphasized that people 
doing CORBA-to-CORBA messaging 
can do so natively and take advantage 
of those performance benefits, while 
CORBA-to-Tuxedo messaging can be 
done in Encompass using SOAP and 
XML to transform and move the mes- 
sages, or in Relay, where bindings can 
be created that allow for direct conver- 
sion of the source payload, such as 
HOP, to the target payload, such as 
TIBCO messaging, without first con- 
verting to XML. This is done by Iona's 
proprietary Direct Payload Mapping, 
which the company claims is at least 
two times faster than other conversion 
approaches. 

Pricing of the new products had not 
been finalized at press time. I 



BASIC PROFILE 

< continued from page 3 

Grossman. Although servers can gener- 
ate compliant SOAP messages, most 
organizations are finding that they have 
to hand-code the WSDL based on 
specific business requirements and dif- 
ferences of hardware on which the soft- 
ware may be running, he said. 

Vendors also see a benefit from the 
Basic Profile in that it helps them deter- 
mine which of the many competing 
OASIS, W3C and other specifications 
and standards to implement. That can 
leave a company wondering which spec- 
ifications are going to be embraced by 



customers and other vendors, said Bob 
Zurich, vice president of advanced tech- 
nology and product management at 
Ascential Software Corp. 

The advantage that WS-I member- 
ship has for small vendors is its low cost 
of entry, which leads to broader partici- 
pation, Zurich said. 

"Sometimes standards bodies 
become private clubs," he said, adding 
that he believed that many times, large 
systems vendors infiltrate other organi- 
zations to push their agendas or that 
membership costs prevent start-ups 
from joining other organizations. "WS-I 
doesn't take that model. They want you 
to participate." I 
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Merant ECM Solution 
Embedded in VS.NET 

Dimensions natively integrated into IDE, 
supports SOL Server, Windows Server 2003 



BY DAVID RUBINSTEIN 

Merant Inc. is starting to see the payoff 
of its renewed relationship with 
Microsoft Corp. 

Merant, a charter member of 
Microsoft's Visual Studio Integration 
Partner program, brought in industry 
veteran Mark Manzo as the company's 
senior director of strategic alliances 18 
months ago to reinvigorate the relation- 
ship between the two companies. 

The culmination of that effort was 
the release last week of Dimensions for 
.NET at the Microsoft Professional 
Developers Conference. Merant claims 
it is the only enterprise change manage- 
ment solution to feature native integra- 
tion with Visual Studio .NET, with sup- 
port for SQL Server 2000 and Windows 
Server 2003. 

"Microsoft is making a push into the 
enterprise with .NET, and we agreed it 
would be good to move Dimensions into 
Visual Studio .NET environments," 
Manzo said. 

Now, users of that IDE will have full 
versioning and change control capability 
without having to leave the environment, 
according to Ash Owen, Merant's senior 
director of product marketing. "Develop- 
ers work against a set of tasks that appear 



in Visual Studio .NET on a pending list," 
Owen explained. "Developers become 
agents of change through seamless, trans- 
parent access to the CM system. Devel- 
opers can manage and implement tasks 
easily to create jobs, check in and check 
out code, and have assets and change 
requests move along in the life cycle." 

One of the key benefits, Owen 
claimed, is that organizations can man- 
age the domains of mainframes and 
Unix- and Windows-based machines 
from a single SQL Server repository. 
This could help those organizations con- 
solidate their IT assets and reduce 
licensing costs, he added. 

Dimensions for .NET includes 
migration services in the form of an 
XML utility that lets organizations 
migrate assets and issues from other 
change management point solutions to 
the .NET platform. "That reduces risk," 
Owen said. "Now, people must integrate 
all their repositories, and make sure 
they're working together. But when 
things fall through the cracks, you get 
security risks." 

Dimensions for .NET will be avail- 
able toward the end of the year, Owen 
said; pricing had not been finalized at 
press time. I 



GPL 



< continued from page 1 

by trying to protect the GPL, IBM is 
really opening a big can of worms. It was 
never SCO's intention to drag the GPL 
into our lawsuit." 

SCO in its release painted IBM as 
being on the defensive. "By so strongly 
defending the controversial GPL, IBM 
is also defending a questionable licens- 
ing scheme through which it can avoid 
providing software indemnification for 
its customers," the release said. Howev- 
er, because IBM's statements are coun- 
terclaim and not defensive responses, it 
is SCO and not the GPL that will be on 
the defensive, said Ukiah, Calif.-based 
intellectual property attorney Lawrence 
Rosen, who added that he doesn't like 
the GPL as a license under which to 
develop software. 

Many corporations dislike the GPL 
because it requires any additions and 
modifications to the software developed 
under that license to be made freely 
available, said Aberdeen Group analyst 
Bill Claybrook. 

It will not be the GPL that is under 
question, but whether SCO agreed to it, 
Rosen said. 

"What a judge [will] say is...TBM 



has said that you, SCO, violated the 
GPL in some way — what's your answer? 
Did you or didn't you?'" Rosen said. 
"It's not general comments about the 
GPL that matter." 

Arguing that the GPL is invalid isn't 
likely to help SCO's case, Rosen said. 
"Legally, [SCO's argument is] a very 
strange argument, but SCO's got to 
answer that. They've got to explain how 
they got rights to copy the software if 
they didn't agree to the GPL," he said. 
"If they did accept the GPL, what do 
you mean it's invalid?" 

According to Eben Moglen, attorney 
for the Free Software Foundation, 
"SCO can't say, 'My permission is the 
invalid GPL.' Those who are for the 
GPL and those who are against the 
GPL would agree in an instant. There 
may be those who don't agree with 
what we do, but lawyers who under- 
stand understand." 

SCO also asserted in its release that 
the GPL was "created by the Free Soft- 
ware Foundation to supplant current 
U.S. copyright laws." 

Moglen said that the organization is 
not trying to circumvent or supplant 
U.S. copyright law, but actually serves 
notice to eight to 10 companies that vio- 
late its copyrights annually. I 



Introducing the native XML 
data management solution 

that's already been 
around the block 

(a few million times): 

Berkeley DB XML 




Out. 1 duta manager powers 70% u[ ilie world's 
<.■-iriw.it, ni/lps millions til people find what 
they need online and proves itself every day 
fur Fortune otfO companies. Willi 200 millimi 
deployments. Berkeley L>B is the most widely 
used applicat loii-speclfiu dala management 
software in the world. And now, It speakK 
native XML. 

Berkeley DBXML quickly and reliably stores, 
indexes and retrieves native XML documents 
so you c&u save significant development costs, 
get to market faster and reduce risk. It includes 
CI I and Java APIs, support* XFutli 1.0 and 
offers all the feature* and advantages Of the 
cure Berkeley DE ougino. 

Check out Berkeley DB XML today Kick the tires, 
go for a. spin ami take a good lmig look under 
the liL>od at www., sleepy ral.com/bdbxjiiL 




IDJTWfl* 
nailers Df0erh9lBi|]D 

C 2008 Slefipvca: Software inc. 



24 



EMBEDDED & WIRELESS NEWS 



Software Development Times . November 1 r 2003 



www.sdtimes.com 



ARM Thumbs Ride to Embedded Bliss 

New RISC cores combine security, power management, trace and debug 



BY EDWARD J. CORREIA 

Smaller code, longer battery life, 
better security, easier debugging. 
That may sound like embedded 
nirvana, but such capabilities 
could soon be in ARM proces- 
sors, according to RISC develop- 
er ARM Ltd. The company in 
early October released a pair of 
new ARMll-based cores that it 
says are the first to implement 
several new on-chip technolo- 
gies it claims give chip makers a 
means to deliver the capabilities 
in hardware. 

John Rayfield, ARM's vice 
president of U.S. marketing, 
said the ARM1176 will be the 
first to include both TrustZone, 
a secure hardware partition for 
storing encryption keys or other 
critical data unveiled in May; 
and the Intelligent Energy Man- 
ager (IEM) processor voltage 
and frequency scaling mecha- 
nism that ARM began develop- 
ing with National Semiconduc- 
tor in November 2002. The 



1176 will be targeted 
mainly at smartphones and 
handheld computers, Ray- 
field said. 

The second new core 
is the ARM1156, the 
first to implement Thumb 
2, ARM's newest code 
compression technology. 
Thumb technology con- 
serves on-chip memory by 
compressing a subset of 
the 32-bit ARM instruc- 
tion set into high-density 
8- or 16-bit instructions. 
Prior to Thumb 2, Rayfield 
said, developers had to 
decide manually which 
code to use, a tedious 
process that involved ana- 
lyzing execution profiles 
determine where code was 
spending the most time. 

Thumb 2 now permits all 
code to be 16-bit, with the com- 
piler deciding whether to keep 
the 16-bit Thumb instructions 
or to substitute with 32-bit 




The ARM1176 core is intended mainly for smart- 
phones and handheld computers. 



to 



ARM instructions. "For exam- 
ple, if the compiler is optimiz- 
ing a loop that takes three 
Thumb [16-bit] instructions to 
execute, it might look at the 
ARM [32-bit] equivalent and 
discover that it can be accom- 
plished in one ARM instruction 



and substitute," he said. 

Also introduced in the 
new ARM 1156 is Core- 
Sight, which Rayfield said 
decouples trace port speed 
from the core and improves 
instruction trace density. 
This simplifies debugging 
of deeply embedded sys- 
tems built around high- 
speed processors, such as 
those for hard drives, auto- 
motive braking systems and 
real-time instrumentation, 
he said. "This improves 
compression technology in 
the trace, so you can still do 
instruction trace with cores 
running at 500 MHz." 
Rayfield said that in 
addition to dealing with in- 
creased complexities associated 
with faster processors, CoreSight 
helps developers cope with 
board and SoC designs that are 
increasingly cluttered with 
peripherals. "Trace gives you a 
stream of output signals that 



[ARM's] debug tools use to 
reconstruct the entire program 
flow, so you can really see what 
the core is doing as opposed to 
what the interfaces outside the 
core are doing." This is most use- 
ful, he said, for developers bring- 
ing up cores, getting hardware 
up and running, and for building 
device and peripheral drivers 
and other low-level software. 

Also new is a so-called trace 
funnel, which permits tracing of 
multiple targets through a single 
trace port. "The benefit is true 
visibility of all the cores on the 
chip, whereas before they might 
have had just visibility of the 
ARM." The alternative was 
using two separate development 
environments that were discon- 
nected, forcing developers to 
"get them working together in 
their heads." 

The new ARM 1156 and 
ARM 1176 cores were released 
on Oct 9; production quantities 
are expected in mid-2005. I 



Birdstep's Into Java With RDM 7 

Database developer adds JNI; SDKs now free 



BY EDWARD J. CORREIA 

How can a C/C++ database 
development environment sup- 
port Java-language applica- 
tions without the performance 
penalty of an interpreted 
language? Through the Java 
Native Interface, of course. 
Such was the reasoning of 
SQL developer Birdstep Tech- 
nology Inc. behind its early 
October release of RDM 
Embedded 7.0, which adds a 
JNI to its application-specific 
and mobile RDBMS. The 
company also now provides its 
SDKs for free, charging only 
for runtimes. 

"We've added the JNI inter- 
face in case anyone wants to 
improve database performance 
of their Java application," said 
Steve Wampler, Birdstep's data- 
base product manager. "If you 
have an existing Java program 
that needs a database, you don't 
have to rewrite it in C or C++," 
he claimed. "You'll have to make 
some API changes, because 
your calls are going to our JNI 
versus whatever Java data man- 
agement you were using. We 
don't see that as a major effort." 



Wampler said that by enter- 
ing the Java database market, 
Birdstep's primary new com- 
petitor is PointBase, which 
offers only interpreted solu- 
tions. "We differentiate by per- 
formance and size. We're small 
and have very high performance 
with in-memory [database] 
capability." RDM Embedded 
occupies about 250KB of device 
memory; the comparable Point- 
Base Embedded uses about 
1MB; both require a JVM. 



Birdstep also now offers the 
RDM Embedded 7.0 SDKs 
for Linux and Windows hosts 
for free, forgoing as much as 
US$2,000 per developer seat. 
Wampler said the move is 
intended to help developers 
kick off projects. "We heard 
from customers that getting [a 
project] started — the process 
of getting approval from man- 
agement to buy an SDK — was 
a hassle for engineers. We 
want to make it easy for cus- 
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Birdstep says Java apps can access its RDM engine with minimal change. 



tomers to get development 
going and work with them on 
the runtime side." 

RDM Embedded 7.0 is 



available now for Linux, QNX, 
Unix, VxWorks and Windows 
targets; runtime costs range 
between $10 and $100. I 



POINTBASE MICRO 4.7 JOINS TABLES, ADDS JDBC 3 



BY EDWARD J. CORREIA 

Java database developer Point- 
Base Inc. in early October 
released PointBase 4.7, adding 
features that it says are intend- 
ed to simplify replication and 
reliability of complex data to 
mobile devices. 

The most significant addi- 
tion to Micro 4.7, according to 
Steve Jones, PointBase's vice 
president of engineering, is 
JOIN filtering, which he said 
enables easier downloads of 
relational data to mobile 



clients. "Without a powerful 
mechanism, it's difficult to 
express the related data in 
tables without [a certain] value 
in them." 

As an example, Jones de- 
scribed a hypothetical compa- 
ny's salespeople, each dealing 
with a subset of the master cus- 
tomer list. "I don't want to 
download all the company's 
customers to my PDA, just ones 
I am currently working with. 
But there isn't a table that has 
just my customers — that's done 



through a JOIN with some oth- 
er table. With JOIN filters you 
can join across multiple tables 
to get all related data." Jones 
said the same result can be 
achieved without the JOIN 
command, but it means lots of 
additional programming, and 
"with that complexity comes 
more chances for error." 

PointBase 4.7 also now com- 
plies with JDBC 3.0, the latest 
version of the Java Database 
Connectivity specification that 
was released in February 2002. 



Most significant, according to 
Jones, is the ability to create 
savepoints through a single 
JDBC API call, rather than 
through multiple SQL com- 
mands. A savepoint is a place 
to which a database may be 
safely restored in the event of 
a transaction or other failure. 

Available now, PointBase 4.7 
pricing remains unchanged 
from the previous version. 
PointBase Micro 4.7 costs US$9 
for MIDP, $49 for CDC, $99 for 
J2SEand$299forJ2EE. I 
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< continued from page 5 

redesigned tool for designing prototypes of Web applications. It also 
can incorporate simulation data from spreadsheets or databases 
. . . Express Logic Inc. has announced that 
its ThreadX real-time operating system 
supports the Controller Area Network protocol for industrial applica- 
tions . . . Empress Software Inc. has ported its Empress 8.6 embed- 
ded database to HP-UX 11 running on Intel's 64-bit Itanium 2 proces- 
sors . . . LogicLibrary Inc. is offering a controlled beta of its Logidex 
asset manager for .NET. This version works within Visual Studio .NET 
and has many of Microsoft's .NET assets preloaded into its component 
repository . . . Ukrainian company Eldos Corp. has updated its Mscj- 
Connect lightweight message-oriented middleware utility for Java, 
Linux, Mac OS X, Palm OS, QNX and Windows. Version 1.2 now supports 
HTTP, as well as J2ME and Palm OS. Licenses start at US$99 per 
developer seat . . . Version 8.6 of MKS Toolkit, a set of Unix-like util- 
ities for Windows from MKS Inc., adds the BASH shell, improved SSH 
and compatibility with 64-bit Windows Server 2003 . . . Borland Soft- 
ware Corp. has licensed Palm Inc.'s PalmSource SDKs and will be tar- 
geting Palm OS with its new C++ Builder X . . . Version 5.0 of Rumba 
Web-to-Host, an integration tool from Net- 
Manage Inc., adds new security and script- 
ing options . . . AppForge Inc. has released 
a version of its MobileVB tool suite, which offers Visual Basic for non- 
Microsoft platforms. Version 4 now has runtimes for Palm OS 5 and 
Nokia Series 60 devices. The company also has decided to offer the 
runtime at no cost— a shift in policy. The IDE costs US$899 per seat 
... Hit Software Inc. has announced version 2 of its Ritmo .NET data 
provider for IBM's DB2 database. The update adds new BLOB/CLOB 
and BIGINT datatypes, and double-byte characters, and also can use 
IBM's iSeries Optimized Database Server protocol . . . NuSphere Corp. 
has updated its phpED editor for the PHP programming language. Ver- 
sion 3.2 now works with PHP version 4.3.3 . . . Autodesk Inc. has 
released LocationLogic, a Web service for implementing location- 
based services deployment. The API, based on the draft OpenLS loca- 
tion services specification being designed by the OpenGIS Consortium, 
can help applications make decisions based on the geographic position 
of a wireless or wired client . . . Pronexus Inc. has updated VBVoice, 
its telephony development plug-in for Visual Studio .NET. Version 5.1 
introduces a new application management console, and adds new 
speech recognition and text-to-speech features . . . WRQ Inc. has 
updated two of its mainframe-connectivity tools for Windows. Reflec- 
tion 11.0, for local apps, and Reflection for the Web 6.0, for browser- 
based access, support Microsoft's Office XP Web Services Toolkit, and 
also can use Active Directory to set and enforce group access-control 
policies . . . Version 2.0 of Entegra, a data 
integrity tool from Lumigent Technologies 



Inc., provides new features for auditing access and changes to enter- 
prise data, as well as monitoring the usage of that audit data, without 
using triggers. Entegra costs US$10,000, and is for Microsoft's SQL 
Server; an Oracle version will be offered later . . . Leeds, England- 
based Acclaim IT Solutions Ltd. is offering ServiceTrack, a tool for 
monitoring and managing production Web services built on .NET. Ser- 
viceTrack is offered as a hosted service for US$27 or £18 per month, 
and as a stand-alone application for US$2,950 or £1,795 . . . Laszlo 
Systems Inc. is offering a low-cost version of its Presentation Server, 
which delivers rich Web applications. Presentation Server XE, or 
Express Edition, is designed for up to 100 users per day, and costs 
US$999 . . . Version 1.4 of JNBridgePro, a Java-to-.NET interoper- 
ability tool from JNBridge LLC, now supports automatic failover to a 
backup Java server, more flexible configuration files and faster proxy 
assembly. JNBridge Pro lets .NET applications access J2EE facilities, 
such as EJBs and JNDI. 

, PEOPLE , 

Web services infrastructure provider Systinet Corp. has hired 
Adam Blum as its new CTO. Blum was formerly VP of engineering at 
Talaris Corp. I 



WIND RIVER 

< continued from page 1 

were going to be [a problem] for 
embedded" development, he 
said, which led to Wind Rivers 
acquisition of the software assets 
of Berkeley Software Design 
Inc. in 2001. However, BSD/OS 
failed to gain traction 
for the company, Fras- 
er indicated. "The pri- 
mary market focus is 
on Linux and not 
[Unix] . We took a risky 
bet that BSD was 
going to be the busi- 
ness-friendly alterna- 
tive to Linux, but that 
turned out not to 
be the case. [Unix] 
became Betamaxed to 
Linux's VHS." Fraser 
said the staff formerly working 
on BSD development already 
has switched to Linux. 

While he didn't count it out 
entirely, Fraser said Wind River 
has no immediate plans to 
develop a Wind River Linux. 
"We think there's relatively little 
value in assembling a Linux dis- 
tribution, and much more value 
in looking at what Linux doesn't 
do particularly well," and build- 
ing tools to exploit those weak- 
nesses, including better Linux 
configuration and scaling tools 
for building embedded images. 

Fraser said Linux tools have 
not progressed as rapidly for 
embedded as they have for 
desktop and server apps. "Get- 
ting Linux up on a custom board 
is still very difficult to do. You've 
got to find a way to get the oper- 
ating system on the board and 
then use the operating system to 
debug itself. And when it's a new 
or unstable piece of hardware, 
that's a very hard thing to do." 

Addressing that need is 
visionPROBE II, which Fraser 
said permits developers to 
download an operating system 
image to a board without any 
previous software on the target. 



x^/w^ una ; 

Wind River was mis- 
guided about Unix, 
says VDC's Lanfear. 



"You can go get [a Linux] image 
from kernel.org or Red Hat, 
MontaVista or TimeSys. We've 
qualified all of those distribu- 
tions." The tool initially will 
support IBM's PowerPC 405- 
based targets, with other Pow- 
erPC variants to be added later 
this year, including Motorola's 
by the end of Octo- 
ber, he said. 

In addition to 
hardware bring-up, 
visionPROBE gives 
developers visibility 
into a running operat- 
ing system. "You can 
see what the micro- 
processor is doing, 
and see physical and 
virtual memory side 
by side." Such visibil- 
ity, Fraser asserted, 
is more important for embed- 
ded system debugging than for 
nonembedded. "Linux is nor- 
mally debugged at the applica- 
tion level, and you get to see 
what the OS presents to the 
application. But the system 
developer needs to see what the 
OS itself is doing." 

The release of visionPROBE 
II is the realization of Wind 
River's desire to build a prof- 
itable business with Linux, first 
stated by company founder and 
chairman Jerry Fiddler in a 
June interview with the San 
Jose Mercury News. 

Chris Lanfear, practice direc- 
tor for embedded software at 
technology analysis firm Venture 
Development Corp., said Wind 
River is simply adapting to the 
way companies are actually 
working. "This is an admission 



that the way things are really 
being done is more complicated 
than just dropping in an operat- 
ing system. Companies, especial- 
ly large ones, can have dozens of 
projects going on at the same 
time, each with mixed languages 
and operating systems." Lanfear 
added that Wind River also was 
misguided about Unix. "They 
thought BSD would be a half- 
way step for people considering 
Linux. But BSD doesn't resonate 
the same way Linux does." 

But will the Linux communi- 
ty embrace a company that has 
railed so heavily against it for so 
long? Fraser believes it will, and 
doesn't think that Wind River's 
past anti- Linux posture will 
undermine its credibility now. 
"We may have been wrong in our 
negative stance, but it was 
founded in beliefs that, wrong or 
not, were understandable. The 
risks we face are either being 
viewed as a bait-and-switch situ- 
ation," with Linux as the bait and 
VxWorks as the ultimate goal, "or 
even worse, that we were mov- 
ing away from VxWorks. Neither 
is the case. This is a dynamic and 
expanding market, and there's 
room for a variety of different 
types within it." 

Lanfear, recalling one recent 
result of raising open-source ire, 
advised vigilance. "We've seen 
the quasi-religious nature of Lin- 
ux developers with the denial-of- 
service attacks launched against 
SCO. Maybe all is forgiven, but 
who knows?" 

Available now for Windows 
hosts, visionPROBE II for Lin- 
ux and VxWorks targets starts at 
US$4,000 per seat. I 



UNIX OUT, LINUX IN 



• visionPROBE II hardware bring-up tool to add Linux support for 
IBM PowerPC 405 targets; more to follow this year. 

• Linux focus to be on operating-system configuration and 
debugging tools; no Linux distribution planned. 

• Immediate halt to BSD/OS sales; support to end June 2004. 

• Staff acguired with BSD acguisition to remain, assigned to 
Linux tool development. 



MOBILE 



< continued from page 1 

cations to consume them. 

Both companies believe 
that such standardization will 
create opportunities for both 
the enterprise and operators. 
"Through the use of these 
mobile Web services, developers 
can establish new business mod- 
els and customer relationships 
through user authentication. 
Software can be paid for at the 
point of consumption, not at the 
point of distribution," said Voda- 



fone's Davey, adding that the 
intention is to develop the specs 
such that software can be made 
to automatically use services pre- 
viously constrained to mobile 
networks and devices. "This will 
be done in a way that requires no 
more user intervention than is 
required to make a phone call." 
To illustrate, Microsoft's 
Maffei offered a location-based 
scenario. "Let's say your car 
breaks down and you don't 
know where you are. You could 
call AAA from your cell phone, 
and a program could access a 



mobile network provider's loca- 
tion engine to obtain your loca- 
tion. With standards-based 
mobile Web services, the devel- 
oper could easily integrate loca- 
tion services from any mobile 
network provider," he said. 

A precise road map of speci- 
fied technologies was set to be 
released at the Microsoft Profes- 
sional Developers Conference in 
late October; the companies will 
seek feedback from the industry 
and will conduct a series of 
industry workshops starting in 
London in January 2004. 1 
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i - ver the past year, a concept 
called service-oriented architec- 
ture (SOA) has gained ground 
as an emerging paradigm for 
V*-* distributed computing. Today, 
while many leading vendors and analysts 
talk about SOA, it remains less than 
clearly defined — more of a visionary 
buzzword than a software architecture 
that can be designed, built and deployed. 

For many developers, questions exist 
as to what exactly an SOA is and how it 
differs from previous distributed com- 
puting initiatives. What's involved in a 
successful deployment and what com- 
pelling reasons are there for enterprises 
to come up with the money to build one? 
And, of course, if the initiative 
survives, when will SOAs be 
more widespread? 

When it comes down to 
defining what an SOA is, key 
proponents of the SOA agree 
that the concept is not entire- 
ly new. 

Jason Bloomberg, ZapThink 
LLC's senior analyst, gave a 
general description: "Gener- 
ally, SOA is an approach to is seeing 
distributed computing that projects. 
represents software function- 
ality as discoverable services on the 
network. SOA by itself has been 
around for 10 to 15 years. What's new 
is that SOAs are being built with stan- 
dards-based Web services that provide 




ZapThink's Bloomberg 
SOA pilot 



an additional level of loose coupling." 

Dan Sturman, director of emerging 
technologies for IBM Corp.'s Web- 
Sphere development team, said, "The 
key insight into a service-oriented archi- 
tecture is taking the existing functions 
that you have in your enterprise and 
starting to tease them apart so they're 
not all linked together as one big 
unwieldy mass. Then you can start to 
rewire those interactions." 

He added, "Everyone has functions 
in their business; the idea of having a 
service per se isn't new. What's new and 
really important about SOAs is that 
you're taking the service, packaging it up 
as a stand-alone entity and recoupling it 
from the other components 
that were using it. You need to 
be able to change how the ser- 
vices are interacting and who 
is interacting with them so 
that they're delivering more 
agile, real-time business ser- 
vices by separating out how 
they're wired together from 
the actual behavior of the ser- 
vices themselves." 

Dave Cotter, director of 
BEA Systems Inc.'s Web- 
Logic developer marketing, 
defined an SOA as "a collection of ser- 
vices, or... the architecture for this col- 
lection [of services] to communicate 
with one another. The services have 
distinct properties in that they're plat- 



form-independent; they're self-con- 
tained pieces of logic and they can be 
dynamically discovered." 

Cotter pointed out, "The notion of 
service-oriented architectures has 
been around for some while. This is 
what DCOM and CORBA were in- 
tended to do, but the biggest issue with 
them was their platform indepen- 
dence." He said that Web services has 
been the fuel powering the 
new move toward SOAs, not- 
ing, "Web services are play- 




defined SOA as the function of design- 
ing and developing applications. He said 
the differentiator between the two is 
minimal but relevant, asserting that 
"SODA deals with the assembly of appli- 
cations. For instance, take the example 
that you're building airplane parts rather 
than delivering the business function of 
being an airline that flies airplanes on 
which food is served and fuel is burned 
for a predictable cost to get an 
executive from one place to 
another." 



ing a critical role right now in 
driving SOAs because they're 
built on top of well-known 
protocols and they inherently 
support all the key character- 
istics of an SOA." 

Oracle Corp.'s Ted Farrell, 
chief architect and director A prime benefit is in 
of application development application mainte- 
tools, said, "SOA has certain nance, says Oracle's 
characteristics. One of the Farrell. 
more important ones is the 
abstraction of the interface from the 
implementation. So you get an inter- 
face that clients can talk to without 
worrying about the actual implementa- 
tion of the services. You almost always 
hear about SOAs in the context of Web 
services, but it goes way beyond that." 

Jim Duggan, Gartner Inc. research 
analyst who coined the variation on the 
SOA theme called SODA, or Service- 
Oriented Development of Applications, 



BENEFIT VERSUS COST 

There is consensus among 
analysts and vendors that the 
most compelling reason for 
adopting an SOA is that exist- 
ing infrastructure is harnessed 
to create greater agility, but 
they disagree when it comes to 
costs involved. 

According to BE As Cotter, 
"If you talk to CIOs and IT 
architects, integration is key; it's the most 
effective way to build extremely low-cost 
next-generation solutions. The ease and 
speed with which they can take existing 
assets and add new opportunities for rev- 
enue streams is a huge leverage point." 

IBM's Sturman agreed. "The most 
compelling reason to adopt SOA is the in- 
creased business agility that results in 
being able to change the way applications 
► continued on page 30 
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SOA Enablers: Retraining, 



If any new initiative is to be successful, it 
must let the developer community get 
its hands on tools and training. While 
SOA is an architecture, developers need 
to have an understanding of how the 
application-building process must be 
changed to enable componentization. 
And, of course, each of the major ven- 
dors will want you to upgrade to its lat- 
est tools and platforms. 

SOA linchpin technologies, accord- 
ing to Dave Cotter, director of BEA 
Systems Inc.'s WebLogic developer 
marketing, are XML, Web services, 
HTTP, UDDI and WSDL. "We're see- 
ing many companies use our WebLogic 
Workshop IDE to map out a business 
process and hang off, or add, the vari- 
ous service components that are part of 
the process." 

Ted Farrell, Oracle Corp.'s chief 
architect and director of application 
development tools, added, "Business 



Process Execution Language, a lan- 
guage that describes the flow, will be 
really important because once you have 
the services, wiring them together will 
be critical." 

Major vendors, such as Oracle, are in 
step with the need for tool sets that are 
geared for SOAs and are releasing 
upgraded versions of their tools. "We 
just recently released a preview of 
JDeveloper lOg, our next version of 
development tools, and along with that 
we have the Oracle Application Devel- 
opment Framework (ADF) that's a set of 
runtime classes that runs on a standard 
J2EE server and creates a highly pro- 
ductive environment," said Farrell. 

"One key part of the ADF is our ADF 
Model Layer," he explained. "It's a layer 
in your architecture, that we've submit- 
ted to the Java Community [Process] 
standards committee as JSR-227, that 
allows you to bind data from any data 
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DEFINING SOA 

< continued from page 29 

pull together and bring up new applica- 
tions," he said, adding that "early 
adopters are already working with SOAs, 
as are the businesses who have to because 
they got to the point where their infra- 
structure couldn't support anything new 
and it started to decompose." 

However, Sturman diver^ 
Cotter's view when it comes to 
the costs involved, saying, "A 
lot of when SOAs will be seen 
in larger numbers depends on 
the economy and IT budgets in 
general. They're not cheap to 
do. As the economy starts to 
turn around, SOAs will be one 
of the first things that folks look 
at deploying." 

Gartner's Duggan said 
flatly that costs are a factor. 
"Whether vendors want to 
discuss it or not, there are 
substantial costs involved in retraining 
and necessary retooling." 

"Oracle sees prime benefits in the 
long term for maintenance," Farrell 
explained. "Rather than building mono- 
lithic applications, your applications are 
broken down to business services that are 
used over and over again. So you want 
to add a process — you're not changing 
the back end, you're just wiring it up." 

SECURITY IS KEY 

Identity management is a critical 
requirement for an SOA because 
it provides an effective user directory 
and policy management infrastruc- 
ture, coordinating user identification 
and authentication, user application 
and system activity, and enables single 
sign-on. 

IBM's Sturman said, "Identity man- 




V- 

'Silo polities' could 
slow SOA adoption, 
says Gartner's Duggan. 



agement plays into SOA in the sense 
that you have these federated services 
spread across the enterprise and there 
needs to be a systematic means of secu- 
rity management. Identity management 
gives you a uniform way of managing 
who someone or a process is, what rights 
they have, and what they're allowed to 
do. It simplifies the security process and 
enables the abilities of the SOA." 

Sturman added, "B-to-B models are 
much more complex because 
you run into problems with 
how different enterprises want 
to negotiate and express identi- 
ties. That's where Web services 
standards come into play." 

Cotter said BEA is seeing 
more SOA implementation 
behind company firewalls or 
between closely aligned supply- 
chain partners. "There are 
some security issues that have 
yet to be addressed before we 
see widespread SOAs on the 
overall B-to-B side," he said. 

Service-oriented architectures have 
taken some time to catch on in the 
enterprise community. The reasons are 
varied and range from perceived com- 
plexities to lack of tools. 

Oracle's Farrell explained: "SOAs are 
not something that people can decide to 
do in the middle or toward the end of a 
project. It's something that has to be 
designed upfront, and it takes some 
thought. Once you start writing, if you 
haven't committed to separating the 
process from the rest of the code, it's 
very easy to start writing it in there. And 
as soon as your process gets tied up, it's 
harder to make that be a reasonable ser- 
vice and the agility is lost." 

Sturman said the toughest challenge 
is breaking legacy applications apart. 
"The hardest step enterprises face is tak- 
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Tools and Technologies 



source into some UI, whether it's a Java 
UI or browser." 

Dan Sturman, director of emerging 
technologies for IBM Corp.'s Web- 
Sphere development team, said, "The 
WebSphere Application Server makes it 
easier to build services up when you're 
building a new component and easier to 
invoke services when done through a 
Web services infrastructure. Our Web- 
Sphere MQ Series is a rich offering 
that's aimed at providing the middle- 
layer wiring that's a key requirement for 
an SO A. Our adapter technology that's 
wrapped into the MQ line also makes it 
easier for developers to integrate legacy 
pieces into the architecture." 

Retraining for developers will obvious- 
ly depend on their current skill set, and 
vendors claim that learning to build SOA- 
friendly applications should be a relative- 
ly easy skill to pick up if learned within a 
tool set that the developer already knows. 



BE As Cotter claimed that Workshop 
was developed for folks new to Java as 
well as experts. "If we take someone 
who's a J2EE expert, they'll be up and 
running in Workshop creating tem- 
plates and architectural components 
almost immediately. Developers who 
are relatively new to Java don't have to 
be versed in object-oriented design 
because we take care of a lot of the 
plumbing for them." 

Sturman agreed with Cotter but 
added a qualifier: "I think there will be 
some retraining, particularly as best 
practices become more understood. 
Developers will need some understand- 
ing of Web services; however, the mid- 
dleware, like WebSphere and J2EE, 
makes it easier for them to go from one 
well to the other because Web services 
are linked right in. It's meant as a natur- 
al progression, technology- wise." 

-Alyson Behr 



ing these monolithic applications and 
componentizing them in a way that 
makes sense for individual use," he 
emphasized. 

According to ZapThink's Bloomberg, 
there are four reasons why SOAs have 
been slow to mature as a solution. "You 
have to deal with these four balls in the 
air at once: security, management, busi- 
ness process and the rearchitectural work 
to move to an SOA. In addition, stan- 
dards and products are still immature." 

Gartner's Duggan said there is a 
challenge that has existed inside corpo- 
rate structures since day one: cross- 
organization cooperation. "In the past, 
groups have been allowed to go off and 
build their own solutions," he said, "but 
the nature of Web services makes it 
critical to have a cohesive plan. It's 
things like 'silo politics' that will cause 
problems with the new architecture, 
and rather than own up to the corpo- 
rate political dysfunction, the solution 
is to hire a consultant or buy a pack- 
age. . .for a hefty fee. I think we're going 
through a rediscovery that you can't 
give development away. The troubles 
don't disappear when you buy a pack- 
age like SAP or PeopleSoft." 

He added, "You end up having to 
integrate the separate applications and 
exchange data well. Web services does 
this well, but this is small comfort to 
someone who thought he was out of the 
application development business 
entirely." But, Duggan warned, "organi- 
zations that don't make an adaptation 
are going to wind up with development 
groups that feel very disenfranchised. 
They are used to having a great deal to 
say in what's built. Not just in what's 
built, the components, but also in how 
it's been architected." 

Establishing a set of successful 
ground rules and processes that have 



been tested on real-world projects is a 
key factor. 

"Best practices are emerging, but 
we're relatively early in the process," 
Duggan said. "Mostly these have come 
about to date by applying J2EE develop- 
ment platforms." Most vendors agree 
that some best practices are beginning 
to take shape. 

Time frames for widespread use dif- 
fer, but everyone agrees that SOA preva- 
lence won't happen tomorrow. 

Bloomberg said, "We're seeing a 
handful [of enterprises] doing SOA 
pilots and a few early adopters actually 
building out enterprise SOAs. It's going 
to be two to three years before we see 
the transition from the early adopters to 
the majority. Probably by 2007 we'll 
have turned the corner." 

Oracle's Farrell thinks it will be soon- 
er than that. "Over the next two years, we 
believe they'll become much more preva- 
lent as developers and architects are able 
to take advantage of improved tools." 

Duggan said, "A lot of the appeal of 
SODA is that it does have the appeal of 
getting things to the right scale for con- 
sumption. Type A adopters, who make 
up about 15 percent of the market, are 
already into second-generation imple- 
mentations. Type B companies — pru- 
dent, value-focused, not excessively 
cost-driven — who make up about 65 
percent, are beginning to adopt, proba- 
bly within the next two years. The con- 
servatives will wait until 2008 because of 
costs." He added, "The system integra- 
tors may accelerate how fast people 
move, but absent that, price-sensitive 
shops probably won't do anything for at 
least another five years." 

Given these stats, for most architects 
and developers there is time to familiar- 
ize themselves with the concept before 
they have to build one out. I 
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EDITORIALS 

Not a Cease-Fire, 
Not a Truce 

Sun wants to expand the penetration of Java within the 
enterprise, and more tightly couple the well-known 
Java brand around its own software offerings. Meanwhile, 
Microsoft wants to see Java die, die, die. 

Despite those rather diametrically opposed business 
goals, Microsoft has decided to continue maintaining its 
(outdated) Java Virtual Machine for nine months longer 
than expected, through September 2004. Sun had to 
grant Microsoft permission to do so; under the terms of 
its January 2001 legal settlement, Microsoft could sup- 
port that old code only through January. 

While both companies trumpeted their new agree- 
ment, don't read too much into the newfound coopera- 
tion between Bill and Scott. Sun still wants to expand 
and monetize Java, and Microsoft still wants to kill it. 
The only agreement is that both companies need more 
time to strengthen their competitive technological 
offering and marketing pitches before Microsoft stops 
supporting that ancient Java code. 

To its credit, Sun has done a good job of getting hard- 
ware vendors — including enterprise competitors Dell 
and Hewlett-Packard — to bundle Sun's up-to-date JVM 
on desktops and notebooks. But after all, what do those 
OEMs have to lose? It makes no sense to ship a con- 
sumer or business desktop system with an out-of-date 
JVM. And since Microsoft's desktop software offerings, 
such as Windows XP and Office 2003, can coexist per- 
fectly well with the latest J2SE runtimes, there's no rea- 
son for customers to choose one over the other. 

The real battleground for Java remains in the mobile 
and server arenas — the latter being where Microsoft's 
.NET is most strongly focused. So while it's laudable 
that the companies agreed that Microsoft should con- 
tinue supporting its obsolescent JVM for another few 
months, we don't expect to see any genuine detente 
between the companies. If anything the intensity and 
enmity will increase in 2004. 

Revenge of the Pure Play 

If you can't beat 'em, join 'em — that's WebMethods' new 
take on business integration. Known as one of the lead- 
ing proprietary integration vendors (along with compa- 
nies like SeeBeyond, TIBCO and Vitria), its offerings left 
it little room to interoperate with standards-based solu- 
tions, such as Web services, and also with competitive 
integration offerings. 

With its recent flurry of acquisitions, such as of The 
Mind Electric and the Dante Group, WebMethods is 
beefing up its offerings with Java and Web services soft- 
ware, and with improved interoperability with .NET and 
CORBA. That's going to be key for WebMethods, as all of 
the proprietary vendors face stronger competition from 
app-server technologists, such as BEA and IBM's Web- 
Sphere business. And that's also going to be key for cus- 
tomers — the proprietary solutions are ultimately going to 
have to become first-class citizens of a standards-based 
environment. Depending on how well WebMethods inte- 
grates its new offerings, we'll see how well it can bridge 
those two worlds. I 
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PERFORMANCE TESTING IS INEFFECTIVE 



I talked to a CEO of a Mid- 
western start-up today. He 
had a problem. His new flag- 
ship Java application couldn't 
handle more than five concur- 
rent users under load. By the 
time his team discovered the 
severe problem with his persis- 
tence layer, they'd already 
invested months in building 
and using the framework. 

As we talked, he was inter- 
mittently distracted by his 
mobile phone alerting him to 
a flood of calls as he scrambled 
to come up with enough time 
and money to replace the cus- 
tom code. He's not alone. As an 
industry, we don't test for per- 
formance soon enough, or 
often enough. 

Let's face it, performance 
testing can be hard. Through 
constant communication with 
customers like the one above, 
I'm starting to get a more com- 
plete picture of the problems 
that a typical Java development 



shop might encounter. 

The wrong tools. Modern 
Java performance tools are 
powerful, but they are built for 
superdevelopers, not the aver- 
age Java developer. Most tools 
are simply not simple or cheap 
enough for the average Java 
programmer. A $900 profiler 
makes sense when 
you're buying for two 
team leads, but it may 
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be prohibitive for a whole team 
of 100 programmers. 

A manual process. Today, 
preproduction performance 
tests are nearly always manual. 
As scheduling pressures 
mount, tests become less fre- 
quent, and less likely to catch 
major problems. Like any oth- 
er bug, performance problems 
cost much more to fix as they 
shift later into the develop- 
ment cycle. 

Too late in the cycle. Most 
development teams address 
performance too early or too 



late. If you're too early, you're 
guessing. You'll likely guess 
wrong. If you're too late, you'll 
find you have written too much 
code to implement major 
design changes. 

In short, current tools, tech- 
niques and methodologies are 
reactive. Most of us are trained 
to fix performance only 
when someone com- 
plains — a customer, a 



tester or an executive. That 
used to be good enough, but 
with today's complex distributed 
systems, small problems fester 
and become big problems. 

WE'VE SEEN THIS BEFORE 

When you wait too long to rec- 
ognize performance problems, 
bad things happen. When you 
wait too long to integrate your 
code, bad things happen. Agile 
programming methods like 
Extreme Programming have 
an effective counter to prob- 
lems caused by delayed inte- 
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If you're using 
software in a 
product, you may be forced to 
give your source code away. 
Your sales manager might 
threaten you. Worst of all, the 
lawyers in your company might 
pull the plug on your project. 

Or, you might suddenly find 
yourself with free lunches from 
the CFO as you use open-source 
software to save your company a 
ton of cash. Your manager might 
praise you for completing pro- 
jects ahead of schedule. Cus- 
tomers might send you thank- 
you notes for creating stable, 
well-tested products. 

The difference is in the 
open-source software license. 
There are many different 
licenses with a wide range of 
rights and restrictions. 

THE POWER OF THE GPL 

The most common open- 
source license in the world, the 
GNU General Public License 
(GPL), is designed to prevent 
forking of the source code of a 
project. It does this by forcing 
you to issue your entire project 
under the GPL if the project 
was derived from software 
issued under the GPL. 

The GPL works brilliantly 
in large software development 
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READ THE LICENSE 

projects, such as the Linux ker- 
nel. There is only one Linux 
kernel. The project didn't fork 
into different proprietary ver- 
sions the way Unix did. This is 
the strength of the GPL. It pre- 
vents people from cre- 
ating their own branch 
of GPL'ed software like 
the Linux kernel and 
selling it as closed com- 
mercial software. 

The power of the 
GPL to keep a project 
unified is good. However, 
for commercial product 
developers there is a problem. 
GPL software developers don't 
make money on their software. 

This doesn't mean that GPL 
software developers are poor. 
For most it's a hobby, and they 
make money in their day jobs. 
These are heroes that devel- 
oped GPL software to change 
the world. They succeeded. 
Like the skilled gunslingers in 
the old Western movie "The 
Magnificent Seven," they beat 
the best, but not for money. 
They wanted a chance to show 
their skill. 

For me, my day job is run- 
ning a software development 
company. I think a lot about 
how to develop software. I think 
a lot about how to make money 




from software development. If 
you're a professional software 
developer, you should too. 

The GPL doesn't work for 
libraries or software components 
that are embedded in products 
destined for redistribu- 
tion. In these cases, the 
restrictions of the GPL 
force software develop- 
ers to place their entire 
project under the GPL. 

If you're not familiar 
with the restrictions of 
the GPL, you could 
be exposing yourself to 
a lawsuit. 

Section 2b of the GPL reads 
as follows: You must cause any 
work that you distribute or 
publish, that in whole or in part 
contains or is derived from the 
Program or any part thereof, to 
be licensed as a whole at no 
charge to all third parties under 
the terms of this License. 

Under the GPL, you can ship 
software as a stand-alone prod- 
uct and also have proprietary 
software shipping with the GPL 
software. For example, you can 
ship a copy of Linux along with a 
commercial word processor. In 
this case, you don't have to open- 
source the word processor. 

However, if your product is 
integrated with GPL software, 
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gration. They promote contin- 
uous integration. 

Many modern Java develop- 
ers use the Extreme Program- 
ming practice of continuous inte- 
gration to solve integration 
problems, embracing a paradox: 
You can reduce your total inte- 
gration time by integrating more 
frequently Its easy to see why 
When you wait too long to make 
integration changes, you have to 
make major changes to bridge an 
ever-widening gap between the 
major components of your sys- 
tem. If you integrate more often, 
minor changes are enough to 
keep things in sync. Through my 
own experience and that of my 
customers, I've found that this is 
nearly always true. 

IT'S ALL RELATED 

Effective integration and good 
performance testing practices 
must be closely related. Integra- 
tion deals with how the major 
components of a system fit 
together. Performance does too. 
To build well-performing 
software, you must look beyond 
the design of any single method. 



Performance characteristics of 
modern applications depend on 
the way that your system fits 
together, especially with re- 
source tiers (like databases) and 
distributed boundaries (like 
messages or remote procedure 
calls). To design for perfor- 
mance, a developer must worry 
about integration boundaries. 

Our thesis is this: Perfor- 
mance problems can cause 
design changes. If you test for 
performance on a continuous 
basis, you find and solve prob- 
lems while they're still minor, and 
early enough to give you time to 
recover from major problems. 

In short, it makes sense to 
attack performance and inte- 
gration in the same way, and 
move from reactive testing and 
tuning toward proactive perfor- 
mance testing that's as automat- 
ed as possible. The ultimate 
goal is to reduce costs by iden- 
tifying and fixing problems ear- 
lier in the product cycle, when 
it's easier. Here are the funda- 
mental practices: 

Measure continuously. 
Agile processes taught us that 



infrequent integration is not 
enough. Similarly, spot perfor- 
mance testing also falls short. 
Since any significant change in 
your codebase can potentially 
introduce a performance prob- 
lem, you've got to measure per- 
formance as you integrate each 
major code change. 

Everyday developers must 
have the ability to check critical 
performance metrics, quickly 
and efficiently. You can't rely 
on programmers' discipline. 
Instead, lean on your process 
and your tools. 

Automate performance 
testing where possible. 
Another agile practice is the 
automation of unit tests. Using 
an automated tool like JUnit, 
you can tell when a code 
change breaks the system, so 
you've always got a measuring 
stick for effective integration. 

When you've got a hard 
requirement for performance, 
automate it with a unit test. 
Your goal is to learn immediate- 
ly when new changes hamper 
performance. 

Make manual tasks quick 



and painless. If you can't auto- 
mate a task, you're looking for a 
quick sanity check. If you must 
trust your developers to check for 
performance manually, your tools 
must be simple and inexpensive. 

Simplicity means that each 
developer on your team can use 
a tool to quickly (within a cou- 
ple of minutes) get a snapshot 
of system performance. Inex- 
pensive means that you can 
afford to give every developer 
the tools that they need to 
check for performance. When 
cost forces you to limit tools to 
a subset of your developers, 
you're turning your back on 
continuous performance. 

In short, you test just enough 
to get a quick and painless per- 
formance snap shot, as early in 
your development cycle as possi- 
ble, with as much automation as 
possible. With these simple 
practices, you'll find your per- 
formance problems before they 
sprout fangs and find you. I 

Cliff Sharpies is CEO and Pres- 
ident of IronGrid Inc., a Java 
test-tools vendor 



then you'll have to publish your 
product under the GPL. For 
example, if you're using a library 
published under the GPL and 
compile it into your product, 
you'll have to publish the entire 
product under the GPL. 

SCO's US$1 billion lawsuit 
against IBM and its attempts 
to force Linux users to buy 
UnixWare licenses are height- 
ening awareness of the dan- 
gers of releasing internal intel- 
lectual property. 

You may not know if the 
intellectual property you are 
releasing is really yours. Under- 
standably, with the SCO lawsuit 
going on, your internal lawyers 
may not want to release any 
internal code to the open- 
source community. 

Even if there were no con- 
cern over the SCO lawsuit, your 
sales manager may go into a 
tizzy at even the thought of 
your freely distributing the 
company jewels without getting 
money for license fees per copy. 

LESS RISKY: DUAL LICENSE 

Wow. Does GPL software 
sound a little risky and a bit of a 
hassle? It can be. GPL software 
also can bring big benefits. 

Want the benefits without 
the risks? Look for software 
issued under a dual license. 

More and more software 
companies are now releasing 
open-source products under a 



dual license. The dual-license 
concept is simple. Customers 
can use the software under a 
GPL-like license or they can 
use the software under a com- 
mercial license. The commer- 
cial license is less restrictive; 
you don't have to release your 
own software as open source, 
and a license fee applies. 

It's common for software 
development companies that 
use the dual license to have tens 
of millions of deployments. 
That's a lot of software out 
there, with lots of feedback to 
fix bugs and improve the prod- 
ucts. Software developers can 
rely on a huge user community 
for programming techniques. 
Development managers can 
quickly find staff familiar with 
the software APIs. 

Dual-licensed software also 
benefits from large-scale peer 
review. According to Keith 
Bostic, former researcher at the 
UC Berkeley Computer Sys- 
tems Research Group and pri- 
mary author of 4.4BSD, "When 
you know your code will be read 
by smart developers worldwide, 
and your payment for doing the 
work is the respect and admira- 
tion of those developers, you 
have a strong incentive to write 
carefully and well." 

Companies that use a dual 
license for open-source software 
enjoy the peer review benefits of 
GPL, but usually all of the 



developers work for the compa- 
ny. This software typically has a 
smaller, more tightly controlled 
codebase than larger projects, 
such as the Linux kernel. In the 
Linux kernel, there are thou- 
sands of contributors who still 
retain the rights to their code. 

For example, at the company 
I work at, we employ developers 
to create a data manager. We 
then sell the data manager under 
a commercial license. We also 
distribute the same product 
under a GPL-like license for 
noncommercial use. We estimate 
that there are more than 200 mil- 
lion deployments of our software. 
The companies that are using our 
software commercially pay us. 

Since my company owns all 
the code, we can issue our 
product under both a GPL-like 
license and a closed commer- 
cial license. 

This means that by paying for 
a commercial license, you can 
develop products such as routers, 
mobile phones, Web browsers 
and content management sys- 
tems with an open-source prod- 
uct and not have the restrictions 
of the GPL. You won't be forced 
to distribute the source code of 
your project. You can keep the 
company jewels in house. I 

Michael Olsen is president and 
CEO of Sleepycat Software 
Inc., which owns the Berkeley 
DB open-source database. 



LETTERS 
TO THE EDITOR 

LOOKING TO FUTURE IN 64 

People are asking if we all 
really need 64-bit computers 
now ["AMD Brings 64-Bit to 
Mass Market," Oct. 15, page 1, 
or at www.sdtimes.com/news 
/088/story3.htm]. The correct 
question to ask is, "How long 
do I expect to use my new 
computer?" 

How often have you pur- 
chased computer hardware and 
had it feel obsolete just six 
months later? The real killer 
app for the new AMD 64 
computers (Athlon 64/Athlon 
FX/Opteron) is futureproofing. 
Buying such computers now 
protects your hardware invest- 
ment for when 64-bit software 
is mainstream, while providing 
record-breaking 32-bit perfor- 
mance at 32-bit performance 
prices. Being able to simultane- 
ously use 32- and 64-bit soft- 
ware and upgrade at your own 
pace is a tremendous advantage 
over the Itanium approach. 

Paul Sundling 

The Killing Zone 

CLARIFICATION 

IBM Corp. and JBoss Group 
LLC are not collaborating on 
AspectJ, an aspect-oriented 
programming language. A story 
in the Oct. 15 issue misrepre- 
sented the relationship. 
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meet deadlines, developers have two choices: 

Use Perforce 
' Cut Corners 




velopers under pressure to manage source coda and do more in leas time, 
trf orce's Fast Software Configuration Management System is the must-have tool, 
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.NET PROGRESS WORRIES JAVA 



Eighteen months ago, many analysts 
(including me) felt that .NET and 
C# would face a daunting challenge in 
the quest for acceptance and adoption. 
We felt that if Microsoft would ever 
enjoy a success with these products, it 
would be through the same method 
with which it established Windows: ini- 
tial limited adoption, followed by a 
continuous stream of releases that 
tweaked the product until it was adopt- 
able. Meanwhile, the company would 
lubricate the product's growth and 
acceptance with a pipeline of market- 
ing cash. 

Almost none of this scenario has 
turned out as predicted. Rather, .NET 
and its supporting cast of languages 
have made steady progress at Java's 
expense. In the process, Microsoft laid 
waste to the three central obstacles 
seen to .NET adoption: no portability, 
not enterprise-tested and no reason to 
migrate. 

Today, we see how the market, 
rather than the pundits, sees these 
issues. The lack of portability has 
become a nonstarter as an issue. This is 
not because of the Linux port of .NET, 
called the Mono project. Rather, it's 
because Windows servers are cheap 
and universally available. If a hardware 
platform is inexpensive and ubiquitous, 



the problem of app portability loses a 
lot of its urgency, except for true 
zealots. Many sites are choosing .NET, 
and if they need a server to run it later, 
they'll pick one up cheaply. 

What about the concern that .NET is 
not enterprise-tested? This remains 
true. But .NET does not need to con- 
quer the enterprise in order to 
widespread success. 

Miguel de Icaza, from the 
Mono project, did a survey of 
sites in March and came to 
the following conclusions, which 
I think make a lot of sense: 

• For projects costing less than 
$200K, his survey found a 
wealth of workable options, 
none of which were dominant. 
In Web development, for example, PHP, 
Perl, ASP.NET and JSPs all worked fine. 

• From $200K to $5 million, he found 
onlyJ2EEandASP.NET 

• On projects above $5 million, there 
was just J2EE. 

However, in the midtier, ASP.NET 
was gaining because of the greater pro- 
ductivity it offered. .NET's better pro- 
ductivity is the result of two factors: the 
complexity of J2EE and the lack of Java 
development tools as good as Visual Stu- 
dio .NET 

Both the complexity and lack of 



enjoy 
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WATCH 




great tools have received considerable 
attention from the Java community for 
years, but as yet no response. While 
they're not bad tools, Borland's 
JBuilder and IBM's Eclipse (Web- 
Sphere Studio) have changed little 
since Visual Studio .NET raised the 
high -water mark. Meanwhile, Java has 
continued becoming more complex: 
JCA, Struts, Server Faces and so on — 
all good ideas but lacking overall coher- 
ence and integration. 

This complexity might be 
acceptable at the level of true 
high-end enterprise projects, 
but I am sure Microsoft will not 
settle for the middle tier of 
applications, and the company 
will continue improving .NET 
so that it can steal big projects 
from Java. 

Finally, the no-reason-to- 
migrate issue: Only people who have 
not used C# and Visual Studio .NET 
contend that there's no incentive. Even 
many long-term Java aficionados, such 
as me, have to concede Microsoft did a 
brilliant job in the design of C# and 
equally in the implementation of Visual 
Studio .NET (which I consider 
Microsoft's best product ever). 

The future is murky for Java, and 
that's not counting Sun's financial 
woes. Eventually, the Mono project 
will have ported all of the Windows 
Forms libraries to Linux, so that .NET 



code will be completely portable 
between the operating systems. Also, 
Java's huge advantage in the thousands 
of tested libraries will slowly but inex- 
orably be eroded as these APIs find 
their way into .NET 

The prospect of a .NET victory has 
Java vendors worried. 

IBM is looking to AspectJ and aspect- 
oriented programming (AOP) as one 
way to find new ways to reduce pro- 
gramming complexity. It also is working 
with Java open-source vendor JBoss on 
AOP. But this step will not be sufficient. 

Java and .NET surely will coexist 
when all is said and done, but for Java 
to maintain its upper hand, it needs to 
begin to refashion how it does things. 
I believe it must start by scrapping 
JCP. Java needs two or three active 
vendors to define a handful of needed 
improvements and implement them 
well and quickly. 

Get rid of the hundreds of currently 
proposed JSRs. J2EE needs to be rede- 
fined — J3EE? — with fewer technologies 
and easier implementation. 

Finally, Java needs to generate true 
native binaries in addition to bytecodes. 
These steps will restore the feeling of a 
tight, effective enterprise platform — the 
right response to the unproven but 
steadily gaining competitor. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works LLC. 




fliCoA wh* — s *^ n * 



Gigabytes of Text 



Search across networks, inlranels, and web sites 

Publish large document collections to web or CD/DVD 

jYb - luii L.Jd i iiidtcat, mih itxil \\a\iil ahE H j -lai'st ri • u\i\'\u m s 
4 highlights hits itfTML ind POF whilr discing imhnddid linlrj knniffllnnind|rj"-L 
* crjnwrts [Qir 1;ln tflJW wr "ri r ■nrns.inr. rinl? : ?sr . FjrwJlflllL iflRil . ZIP 1M|_, 

Llmcpdi ifc.-ln Knil rnr^ ?: sywilh * -- ;-icrJ hdi 
-i- daw'GpBr products Hfie e-jsi hizarcl-bfeied setup apdarwl Ah 

neJw-wA-MiisKS -I 

■SWf 



■fifllua" -BWtEt. 



InLhnpail fuu i\nnt, wmt 
bPallhininre-IFwIiMlt 
run pjnlns:d 



chlDar WHu.-.tf 




r f s afe - 



''Wirj puBirnpl .,_ ■ irtnrjnjEnnnj 
numbariif wijx to-uarch 1 ' 



dtScjrdi ■ 



u 4 pipyMI rt Hlilig engine 
... a j Ue1|¥e ttfln^Bjui nf lfi| 

feniQiiitiirpiHin 
dfcuhnFT-ffJW ri 



Mir.'tfr^Ulrj^uwr 

"IflirtlntftlbluJnD 
Rem }nt Cr.rlx 







■cftSeandi 



Tc.i Hrferitval 

Engine 

■ t US 'irijx 

* e*U forpn'ting 





www.dLayarch.tuni 



Desktop 



SNdcr 

* inrii.'^ra 

iv-T Di-.-"i: r F . 

MnnwJfa and 



* j .fpnt^j 



\i\i\0 



1-8Q0-IT-FINDS 

Eai-Saainssarch.cc-m 



Network The Smart Chntae Fgr 
i.* ■-.-....-«, jtoi Tut HnlrlDrar since 1901 



G* 



Dinkumware, Ltd. 

^tv w.dinkumware. com 



Keep youi producis higlily por inbLc and reliable 
with our tup t|iiiiliiy s standard cunfurnritifr libraries.. 

StD.nd.Eird C Li±ir»ry 
CB9 P LT3B, C$B 

5tD.nd.Bird C+-+ Library 

3C+-4, JLbridgad, C+- + 5 3, C+~D3 

How do your shop ftt^ncJ^rd libraries nipssure up? 



Ditikutn Developer Sublicense A^rLcmctit 

iiiliiilniliiiliiiliiiliiiliiiliiiliiil in 



fins ccvmnfrtiftnftive H^f-nKft for 

ISinkum Unabridged Mhrary for VCZ fr i , CtT.C^ 

and ncheT pnp-ijlar cnmpilirs 
THrikum ("nrr-X ]Jbrary 
Tlinlcum Quick Prnnfer 

I'dcsJ for or^ani^y i ion* with doicns. oj hundf e*3a of dtvdoptH 

^Lm^Jcfks. d-OJjIo-yilfcCJSC aCnflaa JHuJlipdc pLfllfbcma 
Guaranteed anftoLiift: aupporc tcf vlcca 

JJSCJu djfL^ ^ftfiu $\ vfCiiftJl up^radc-a 



ne^td- far £Cfl.n4l*rd CCunpliginT librarlfs btsrtinp; rc L ; SH l&^OO- 

'l^iiCiiniiin:, J.Tnlnm At I'l^nw *ta R*-^-iiH^i| Tr#jpmrk^ M" J.lribun-j iir. I Jil 



36 



COLUMNS 



Software Development Times . November 1, 2003 . 



www.sdtimes.com 



THE JOY OF XML 



XML rocks. No, no — don't turn the 
page yet: I know you aren't interest- 
ed in either high-level promises or a 
page of acronyms on how WS-Thingus 
fills in the gaps in WS-Whatzit. I want to 
talk about how XML let me solve three 
day-to-day problems in the past two 
weeks and pointed me toward entrepre- 
neurial revenue potential, the far side of 
the programming world compared with 
the system integration benefits that cur- 
rently dominate XML success stories. 

The first thing I want to tell you is 
that the above paragraph contains 76 
words (unless my editors punched it up 
after submission). As a reader you don't 
care about that, but as a writer my busi- 
ness rotates around word counts. Using 
Word 2003, I set up a template that 
adds XML tags to my writing as I go. 
Using C#, I wrote a program that opens 
an XML document, and adds several 
attributes to those tags — currently, 
word count, a guid-based id (a guid is a 
globally unique identifier), create-date 
and edit-date. Now, with no hassle 
beyond using an Office template, I'm 
creating business metrics in the word 
processor that I use anyway; instead of 
documents being a blob essentially 
impenetrable to analysis, XML-tagged 
documents are transparent to analysis 
and manipulation. 

On book-length projects, an XML- 
based management system could track 



progress and editing hot spots, automate 
the process of extracting, compiling and 
testing program listings, and, not 
insignificantly, transform the document 
into a Web site or prepare it for printing. 
Of course, this type of thing has always 
been possible in Word, using Visual 
Basic for Applications and Word's object 
model, but XML programming skill is 
becoming commonplace, and walking 
the nodes of an XPath query is vastly 
easier than manipulating the 
currently selected range of text 
and the active search parame- 
ters, which is how you have to do 
such things in VBA. 

The second story involves a 
program that I was writing for 
the .NET Compact Framework. 
I was porting a desktop program 
that consumed a Web service 
that returned a typed DataSet. 
DataSets are one of my favorite features 
in ADO.NET, the data- access model 
of the .NET Framework. DataSets are 
essentially an in-memory database, and 
the base DataSet class allows you to 
access data by passing in the column 
name in string form and then casting 
the returned object to the expected 
type (decimal aPrice = (decimal) 
currentRow ["Price"] ). 

That works fine, but being a strong 
typing advocate, I much prefer typed 
DataSets, which are subtypes of the 
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DataSet class that are automatically gen- 
erated and protect you from misspelling 
and type-conversion errors. 

But the .NET Compact Framework 
does not support typed DataSets. This 
would be a significant problem were it 
not for the power of XML. I simply cre- 
ated a new Web service that consumed 
the existing Web service and, instead 
of returning a typed DataSet, was 
defined as returning a string. The string 
value that my new service returned was 
the result of calling GetXml ( ) on the 
typed DataSet. 

Although the Compact 
Framework does not support 
typed DataSets, it does support 
regular DataSets, which just 
happen to have a method called 
ReadXml ( ) , making the recon- 
stitution of the string into a 
complete in-memory database 
the work of a single method 
call! Although of course I used 
that facility, I certainly could have 
parsed the XML myself. The point is not 
that DataSets are cool for supporting 
XML (although that is cool), but that 
XML's string representation can be used 
to smooth over any number of interop- 
erability bumps. 

The third moment came from a burst 
of enthusiasm. Flushed with adrenaline 
after a particularly successful day of pro- 
gramming-for-pay (you know, one of 
those days you think: "Hey, maybe it's 
just as well I didn't pursue my fortune in 
Hollywood"), I slapped an ink-enabled 



picture control on a form, Googled "Pro- 
gramming Radio Userland" (the blog 
client I use), and went click-drunk for an 
hour or so. It turns out that the 
MetaWeblog API is supported by lots of 
different clients and that the Meta- 
Weblog API is controlled by XML-RPC. 

I downloaded Charles Cook's XML- 
RPC library (www.xml-rpc.net), added to 
my project a reference to the DLL, 
added a couple of attributes to my meth- 
ods, and the first time I compiled the 
application, it successfully created a new 
post in my blog. Granted, this was more a 
"joy that smart people like Charles Cook 
make great, easy-to-use libraries available 
for free" than a "joy of XML" moment, 
but the fact that my new ink-enabled 
blogging tool will work with a broad array 
of blogging tools is a credit to XML. 

All of these XML moments sparked 
my imagination — maybe I should make 
a management system for book-length 
projects; maybe I should write tools for 
the .NET Compact Framework; maybe 
I should continue with the Tablet PC 
blogging tool. It's true that the work of 
the various XML standard committees is 
tremendously important, and that legacy 
system integration is an area generating 
a lot of XML success stories. But when it 
comes to the benefits of XML, don't for- 
get the human element. I 

Larry O'Brien is an independent tech- 
nology consultant and analyst, and the 
founding editor of Software Develop- 
ment Magazine. 



ONE STEP FORWARD, ONE STEP BACK 



Sun's in trouble. It admitted to a bil- 
lion-dollar boo-boo in the last quarter. 
HP is offering its enterprise customers 
twenty-five grand worth of free services 
to switch to Carly Fiorina's Linux servers. 
McNealy & Co. still can't get their Linux 
and open-source stories straight. And, 
then there's all the Java fuss. 

Not all is doom and gloom, however. 
Acer, Gateway, Samsung, Toshiba and 
little known, but popular, white-box ven- 
dor Tsinghua Tongfang are now 
bundling the latest Java Virtual 
Machines (JVMs) with their Windows 
desktops and notebooks. With the earli- 
er deals with Apple, Dell and HP, Sun is 
getting close to having the majority of 
new PCs arriving at customers' doors 
ready to run Java. As AOL and Microsoft 
have shown, getting your program prein- 
stalled on PCs is half the battle in mak- 
ing your application popular. 

And, of more immediate importance, 
Sun seems to be willing to work with the 
Eclipse Consortium. I know it's not to a 
Java purist's taste, but the Eclipse 
Framework's far faster native interface, 
compared with NetBeans, would make 
Java on the desktop a much more viable 
choice for development managers and 
their programmers. 

I'm still not ready to say that Java can 



make a comeback on the desktop. How- 
ever, if Sun and the Eclipse Consortium 
can come to an agreement soon, all 
those brand-spanking-new JVMs on all 
those PCs might prove the foundation 
for serious Java desktop applications, 
both commercial and home-grown. 

On the other hand — you knew that 
was coming, didn't you! — Sun is ticking 
off some of its Java partners in 
the Java Community Process 
(JCP). How? By branding its 
new software services stack Java 
Enterprise System, which is 
both an umbrella and replace- 
ment name for Sun ONE. It's 
also renamed its office suite, 
formerly "Mad Hatter," as Java 
Desktop System. 

Sun, of course, owns Java, and con- 
trols how the trademark is licensed and 
used. Until now, it's been reserved for 
the programming language and specifi- 
cations — that is, as a technology, not as 
a product. Therefore, the other vendors 
in the JCP have not been able to use 
Java in their product names. Likewise, 
Sun has always restrained itself. ..until 
now. To engineers this isn't a major 
deal, but for upper management and 
marketing types at Sun's Java-centric 
competitors, this is the kind of action 
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that may cause them to re-examine 
their commitment to Java. 

Ironically, in the case of the Java 
Desktop System, there's really not a lot 
of Java in there. Instead, Sun is selling 
primarily an open-source/Linux-based 
desktop system with an included JVM 
and some bundled applications. 

This underlines two other Sun prob- 
lems. The first is that the Java Enter- 
prise System and Java Desktop System 
names will only confuse people about 
Java. Remember how Microsoft 
used ".NET" to describe every- 
thing it made, including prod- 
ucts that had nothing to do with 
.NET, such as the .NET Pass- 
port? Remember how people, 
even Microsoft employees, 
could no longer tell you what 
.NET meant? 

I fear that unhappy situation 
could happen to Sun and Java. Java's a 
great programming language, and in 
J2EE it's the basis for great application 
servers, but it's not a desktop office 
suite. Branding everything .NET didn't 
help Microsoft. Branding everything 
Java won't help Sun, or Java develop- 
ers, either. 

The second problem is that Sun con- 
tinues to embrace open-source/Linux 
with one hand, while trying to stab it in 
the back with the other. Sun, get your 
open- source/Linux story straight once 



and for all. Confused users aren't buying 
users, and they're certainly not going to 
be loyal users. 

At the same time, Sun is continuing 
to spar with JBoss, the leading open- 
source J2EE company. JBoss has finally 
joined the JCP, but both Sun and JBoss 
may be more interested in continuing to 
fight over licensing and open-source 
issues than getting to work on bigger and 
better J2EE implementations. 

Maybe the one common theme is that 
Sun seems to me to be wasting too much 
time with too many other issues. Perhaps 
the company's top executives should 
focus on leading the JCP to produce the 
best possible language and toolkits for 
developers, and ensuring that essential 
Java Specification Requests get pushed 
through the community process quickly. 

Sun, it's time to get your act together. 
After all this time, the confusion about 
Java had been dying down. First, it was 
Java-the-language versus Java- the- JVM. 
Then it was J2EE versus J2SE. And now, 
you've stirred up the pot with Java-the- 
community-technology versus Java-the- 
Sun-products. Please, no more bad news 
and no more confusion. Is that too much 
to ask? I 

Steven J. Vaughan-Nichols is editor of 
Practical Technology (www.practical- 
tech.com) and has worked as a program- 
mer for NASA and the Dept. of Defense. 
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SERVICES GET PERSONAL 



Efficient application development is 
not about squeezing more work 
out of developers. It's about improving 
and even changing the way organiza- 
tions think about software — what it's 
written for, who's using it, and perhaps 
most important, spreading around 
some of the responsibilities for creat- 
ing and changing applications. 

These are the beliefs of Jonathan 
Sapir, president of a decade- 
old firm called InfoPower 
Systems. Sapir has been al- 
most quixotic in his belief that 
within organizations, IT de- 
partments will become facil- 
itators for business users creat- 
ing their own applications, not 
producers. 

While tilting against a sea of 
midlevel programmers probably isn't 
the most popular move a CEO trying 
to sell a new form of development tool 
can make, he is ardent when he says, 
"It is not feasible to continue doing 
things the way we are today." 

Sapir has been putting forward the 
notion of personal service builders — 
kits people can use to build services 
like Lego blocks, and then string 
together those services into loosely 
coupled applications. 

He says that a company called 
Nobilis is working on something simi- 
lar, and thus this represents a trend. 
I'm not sure two small companies try- 
ing to carve out market space using 
similar approaches quite establishes a 
trend, but Sapir's ideas are interesting 
enough. 

He sees significant changes in busi- 
ness — and life — that will move organi- 
zations toward this way of thinking. 

The first is that the people IT serves 
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tions were written largely for produc- 
tion workers, so the stimuli and re- 
sponses could be well planned out, but 
says there are more variables now that 
result in unanticipated stimuli and 
unexpected responses, and business 
people need to be able to adapt to 
those changes quickly. 

Sapir also points out that the work- 
ers themselves are changing; they are 
more computer-sawy than in 
the previous generation, and 
will not be as quick to accept 
anything that comes down from 
IT without question. 

Sapir makes the point that 
employees today want indepen- 
dence and the ability to make 
an impact. They no longer are 
satisfied to be cogs in a corpo- 
rate wheel. Workers, he argues, have 
gone from being happy to have a job to 
being happy to be a part of a team 
to wanting to make a difference by 
themselves. 

Then there is the speed with which 
things are changing these days. "The 
change float has disappeared," Sapir 
says, referring to the leeway companies 
used to have in making updates and 
fixes to their software. "The water- 
fall methodology can't be done any- 
more. Things are changing too quickly. 
The notion of freezing requirements 
doesn't work anymore." 

So he advocates turning the focus of 
these IT issues to individuals, and pro- 
viding them with the toolkits they need 
to create services-based applications. 
SnapXT, the services creation and 
assembly tool being released into beta 
testing this month by Sapir's company, 
provides a platform for creating these 
event-driven applications. 



are changing. He notes that applica- Going back to the Lego analogy, 



Sapir explains that it's like using a kit 
for creating individual buildings, or 
cars, and then bringing them all 
together to create an entire town, or 
taking a building out of one Lego city 
and dropping it into another Lego 
city. "Chunking and syncing" is how 
he described what people using 
the new personal services builders will 
be doing. 

There are four basic tools that 
constitute SnapXT: an Eclipse-based 
design tool, a wizard that leads novice 
users through the steps of building an 
application, a visual tool for building a 
map, or model, of the application, 
and — although it's not ready yet — a 3D 
modeling tool. 

"All we're doing is manipulating 
XML to be read by the runtime engine 
to assemble the applications," Sapir 
says. "We're just rendering XML in dif- 
ferent ways for different users." 

He even touts what he calls "ex- 
treme service building," which pairs 
experienced, midlevel developers with 
novices to make them more self-suffi- 
cient. "This allows IT to focus on 
things that are more complex than 
changing an interface," he says. 

This has broad implications for IT, 
he insists. "There will be a new type of 
position where midlevel programmers 
will move out of IT and into the busi- 
ness units" to make up these teams of 
extreme service builders. 

While acknowledging with others in 
the industry that interoperability prob- 
lems between Web services remains a 
large issue — "That'll take some time to 
iron out," he says — he insists this is the 
way of the future. "We're just at the 
start of this thing." 

It will interesting enough to follow 
him along his quest. I 

David Rubinstein is executive editor of 
SD Times. 
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According to a recent Gartner Inc. survey, about one-quarter of 
a company's IT operating budget — 23.2 percent — was allocat- 
ed in 2003 for internal staff. How was that money spent? 
According to Gartner's 2003 IT Spending and Staffing Survey 
Results, the biggest budget items were software application 
support/maintenance and hardware support/maintenance. 
Nearly as high on the budget were operational expenses for 
software application development. 

Other internal staff operating budget areas — such as IT 
administration, system and network management, help desk, 
project/program management and advanced technology/ 
planning/architecture — had smaller shares of the internal staff 
operating budget. 



mww.Qavtntr.ccm 



Open-source database developer MySQL AB last 
month acquired data management start-up Alzato. 
Terms were not disclosed. With the acquisition, 
MySQL will integrate the Alzato NDB Cluster high- 
availability system into its products for telecommu- 
nications and other networks . . . lona Technolo- 
gies Inc. reported a net loss of US$1.95 million on 
revenue of $17.4 million for its third quarter ended 
Sept. 30. Revenue declined $9.1 million from the 
same quarter last year, while the net loss improved 
dramatically from a loss of $26.2 million in the 
same year-ago period. The company also announced 
it has named Peter M. Zotto as chief operating offi- 
cer. Zotto, who served as vice president of marketing 
for the past three months, joined lona this year from 
privately held Proteus Industries, where he was 
CEO . . . Business process management solution 
vendor Intalio Inc. has opened offices in London and 
Brussels, Belgium, marking an expansion into the 
European markets. The company cited research 
from Aberdeen Group indicating that spending in 
Europe on BPM products will top US$1.67 billion in 
2005 . . . Apple Computer Inc. reported fiscal 2003 
fourth-quarter revenue of US$1.71 billion and a net 
profit of $44 million, compared with a loss of $45 mil- 
lion for the same quarter a year earlier. The compa- 
ny said fourth-quarter revenue was up 19 percent 
from a year ago. Apple said it shipped 787,000 Mac- 
intosh units during the quarter, as well as 336,000 
iPods. For the year, Apple reported net income of $69 
million, compared with $65 million in 2002, on rev- 
enue of $6.21 billion, compared with $5.74 billion a 
year earlier. I 
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Advisor Lotus/ Nov. 3-7 

Access-VB-SQL DevCon 

Fort Lauderdale, Fla. 
ADVISOR MEDIA INC. 
advisorevents.com 

Windows Driver Nov. 11-14 

Development Conference 

Redmond 
MICROSOFT CORP. 

www.microsoft.com/whdc/resources 
/events/DriverDevCon.mspx 

ApacheCon Nov. 16-20 

Las Vegas 

APACHE SOFTWARE FOUNDATION 

www.apachecon.com/2003/US 

Comdex Fall Nov. 16-20 

Las Vegas 

MEDIALIVE INTERNATIONAL INC. 

www.comdex.com 

MAX: 2003 Nov. 18-21 

Macromedia Conference 

Salt Lake City 
MACROMEDIA INC. 

www.macromedia.com/macromedia 
/conference 

XML Conference & Expo Dec. 7-12 

Philadelphia 

IDEALLIANCE 

www.xmlconference.org/xmlusa 

For a more complete calendar of U.S. software devel- 
opment events, see www.bzmedia.com/calendar. 

Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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"The difference between manual coding and using 
TOAD is like comparing riding 3 motorcycle 10 walking. 
My job demands that I juggle development and testing 
with database administration, and only TOAD k iU s -it- 
do it all. That's why I start off each day with TOAD.* 

Gel to know TOAD — visit www.quest.com/sdtimes 
today for a tree walkthrough and see why more than 
300,000 Oracle pros use TOAD. 
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